greennnatural.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:30:99:fd:1e:05:0e:c6:fe:b9:b9:d9:c3:e0:29:70:10 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=greennnatural.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:30:99:fd:1e:05:0e:c6:fe:b9:b9:d9:c3:e0:29:70:10
Serial Number (int): 291686590950289334867677134760585137319952
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 47:74:b2:60:65:3e:19:69:71:04:76:e6:92:09:c8:9f:95:1b:9c:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b2:ef:6c:39:15:3e:38:43:f2:e8:b6:1f:db:67:8c:7f:03:48:77:19
Fingerprint (sha256): 6a:e4:2d:57:04:ab:b9:7b:ee:bb:81:37:c8:3a:92:29:1a:ae:6e:0f:9d:0e:5a:de:76:5e:52:48:b4:90:1c:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate greennnatural.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for greennnatural.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

greennnatural.com
www.greennnatural.com

Other certificates including the domain name greennnatural.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for greennnatural.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291686590950289334867677134760585137319952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 19:05:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 19:05:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'greennnatural.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910838017481795783193483767530092274121380924421155791556728016274653136356817661346615167598733847674557976113777900719489111647736511938148048060973629745928020332989467154733154230628288052751514512546474841247119737176582960805542572867264231015974607055323899718383082176409189840122310042067822717874714666649604819882071141454483477498730072391237620023885561536773910193501663661682995114104174248293574821723616555682264157309544746985533349837147735743369388875010434739708200063438216271028047155907092868740556969100829868585276235961052837169596749198123363176903697758541051191427064272324709657790754869808325687016765365316665932676736498604930505836799174877686025207535195582194019476613820933430072092976338951574867140458591568044782277798591252961338157470144939278897509373171416948849194478056651375166608745258250095336999403877090382099684790856452268268761388685553127186423321246035577366734380461944097720099358851307994744545007987586764890269620561276150385240695367488712192843661343840550333924303432762706783694563982078036234619978611006656823045116906174278853472393750239305950256163634412179522715001184751804308154227267745376228257586982895340856307127698064686190437308895640878333299492453783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4774b260653e1969710476e69209c89f951b9c67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greennnatural.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greennnatural.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170cb33c67d00000403004830460221009de3f78bf93285e8d982a3f66d10017d2bafa8036bed2c9d6d9afb3b7de0c37e0221009af77ee5f3ea0acb228fad832cb5f93fdeabcc9b6e764d24be38c196adad243a0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170cb33c846000004030046304402206c15c9855cfd27c3747e6cdd25dcb938632e17584f663b0730a5393161b34be302206aebdf0970ad42e807ee53d164b4759b6291695e7435d01623c937783bc75d82
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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