www.lemongrove.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e0:8a:d6:c7:48:89:75:18:8a:f7:76:f2:31:d9:9a:7a:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lemongrove.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:8a:d6:c7:48:89:75:18:8a:f7:76:f2:31:d9:9a:7a:fe
Serial Number (int): 424856942574223727080140884810760715926270
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:99:39:ac:a0:05:9d:10:e9:37:46:43:93:55:93:03:0c:fb:e1:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:20:fe:b2:6d:28:54:74:9c:00:82:35:1c:38:57:82:64:3f:d5:d4
Fingerprint (sha256): 6b:a4:b6:3a:3a:71:60:e2:96:81:a7:a9:13:a7:e7:2c:c5:11:58:1f:63:ec:e2:32:65:30:f8:5a:31:79:1c:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lemongrove.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lemongrove.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lemongrove.net

Other certificates including the domain name lemongrove.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lemongrove.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424856942574223727080140884810760715926270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 23:32:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 23:32:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lemongrove.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 838343536391225974316512759535580165759187068427732724128315226360340195970137810346600282562686616680649756949600378726751956771637286146978085994699326401271238696770951744101985390059265979674572356298202010407116186469957319845668909513676175907043391732140350350664097493612126237222459826700350500228760828409664582080271594552264857557636028804389877994423193119923173827229235868067261998987622442851169129420356180433973836626670115674991293175805711425249332730469710839829509694216289274436945485429666612261358630950952894267850274549337885189408496075968794944644937901871349645547599353852159929746590075087263323485969583135814563865987513323382947532921792758492309519340065685735639174079857391691883580134855812684807582515783553868157768528563379341499557117216485022388130801029140335606740704288480600586289930720291287426271407208081334552438041167734564037439318384082470693590754003864191456067154932193172349407756982624781527380473472507071755172674576176169945564835197213094022345933424562425755546595048602317178982823288836888655780669828364420848807672162732171246027751011887077708957654489870539190678892604163306195072711758457521016997133564644997228057291778482442349882804135581500563841837464363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d49939aca0059d10e9374643935593030cfbe1e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemongrove.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704b68fc45000004030048304602210087d18a4be433ea05d1f2d388acda1e93147c214b3e46ee439f3016176147c03902210095e203e7686f5156288df7a23d5db1b07dbc6990975eca03c232d19500c870f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704b68fc7b0000040300483046022100cc10583bf23b2f6be6b4bdfd5f01d64a099f7c383b0138c44aa49ee86b5d12e202210081e49f104d1374991f05680ae8d072052b667c818ce94998f5e9100ad095fea4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007605e8f91ad96542b4772869d71685ae2d4b82024bd91faca3015fdd361e7384c96afbdfaa7f07665c4297afcfc5ab9ad534cdb02f1d2089577259f506fe2bedc48f8a89fd8862881fea51b1095c5504e4fc164c2b7a25c9ee0d84772411c0588b2677a3f5ed506faa64463894f91991e98dc28751f1763f69e661bf1e7c846bf9196b38467039edf6e94cf18706e4e9a717d711888d41c8e945b362d9ae7681cf4cbaa8ef92b3c7d78f21da2336834f61470098194f10c6e65706d6e096b7e276df06ec5426faaf4b5da108f59163d73cfaccfc1bf678abab0d5cfed217fcd931bd3901d8f5be75dbc68b0881b72be3d5095c464af8261adc7c9b65db7b7666