lumacone.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5d:bc:5b:0a:a9:e7:79:3e:58:a7:7b:64:00:bb:90:02:3f was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lumacone.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5d:bc:5b:0a:a9:e7:79:3e:58:a7:7b:64:00:bb:90:02:3fSerial Number (int): 293233485497435001008528034141023320932927
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 97:57:82:2b:d2:43:54:2b:63:0b:d5:1f:11:e5:0d:7d:f2:a8:a5:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 27:8a:eb:9c:22:c5:8a:6f:d8:b3:7b:e8:6e:fb:15:40:23:26:1d:80
Fingerprint (sha256): 76:37:8b:cf:45:92:ec:a0:40:07:4e:f4:5c:39:81:74:ec:77:67:dc:fc:99:4b:5e:bd:ee:4e:a0:c5:f5:87:8f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lumacone.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lumacone.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lumacone.com
Other certificates including the domain name lumacone.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for lumacone.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISA128Wwqp53k+WKd7ZAC7kAI/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjkyMTEyMjVaFw0y MDA1MjkyMTEyMjVaMBcxFTATBgNVBAMTDGx1bWFjb25lLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAMEGHl4AezvzR/tBFsqizShbF1zwHfKsLQWm 8HqG6yoSWdJSwF4vTvYoe2VK8JLc3LCN2F49LhW/zzhbZ8Da2QuNyQt+TDkVyrw2 U8O9rC99Ui24oYPK6rXMobxgB8L0W8GJz5K5seHgICdkvL0BhXp5uRmhy1W1XPUr 0PWAnGEQv3iqOpfMHOh192eGYDtZPoUz6Rdtsmjb7D7/pnJtd2oafa2Yhj3VL4Cz sg2/ze/kNRKPvztSm/f4Y1GtUguRfulbqbMhLQqr3F+o5wAiQ4haG7WH7vOWKNmi 8EzubQbr0m2AgK01jE39LGDPDBMD4EpBrIQwypvOCo3RGLw0SjSwU6P8vASZKljl 05H0cc75DltPnkYhQTQFB4PUw9++EorgqlRAyK2ndxIMccbLYtnPg5d4iMpa7pQ+ 0SXUNxkwc3wHhHpenULP6OTyNFFG289VhNJF2K/BEje5lwp6KLvAAYzYCtYRMBsz cfHQ2Bjli0syJ7upkTBu1qHIKPBDXTiiKSDLy88FOGBYDX8xpb4p6lkxwnBX0kRC c/jQUayAmRSMhIgf9WrCT4xos9irWRp7G9UzBzG6Gr4FtEXHQQpoYUNPlEZWlhKe xiZzsq3Qr8AS1TUsMl6nWmH/eC8s3lbxvjMQ6WCZqsoUJx6vur+D3a3jNkyehiLz TZ6ZBHWpAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJdXgivS Q1QrYwvVHxHlDX3yqKVJMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbHVtYWNvbmUuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwkwH8FgAABAMA RzBFAiANYFAkuQjQlQ9ctbSQxXbRKou3zgnK6m/S25mKs8UNhQIhALWElgJMYHg+ PDfJiQE37OKXDv/L1uuTwoWxq8KmAV1WAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkC wQApBo2yCJo32RMAAAFwkwH8TAAABAMARzBFAiEAs8JjefC8TKSD0leF9gkvSp9c oXXiksMNgtxsTOMOYvwCICLnIvwc6dv0hz9iJzZr/YKP/pSADTs4MAS9xuCJagEF MA0GCSqGSIb3DQEBCwUAA4IBAQBXGlFNA65yaZugFvr0CFpV9lgblnXAV/GQ+1O9 /Oc4yBtxI3eV8TlNT8X9vOerLZTmn0q83wVKpk1BHJE9EpILpIWez8ChpX0ygU1C Uf96U+RsxW+C58zfjIGfuCJ4pmSvuNgRPTQP8yP9ng+/s7z/tfCmhoXNKds7SlSx fo3ScRpphiWSXbxowX6W+Rmsm2NuCAseXPqAh/iSiTtbFw9zDugbi0U1B96Hc05p nopJcERHmB58iaFOnyPIuUTlGSYrWx1/jhkZm6xBknpjDCEgJEzDJM424fzgpsas RgknQcxyF4kLqlKQtz0MjzEyKW5elZihaBTSwEpRA386FBHx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwQYeXgB7O/NH+0EWyqLN KFsXXPAd8qwtBabweobrKhJZ0lLAXi9O9ih7ZUrwktzcsI3YXj0uFb/POFtnwNrZ C43JC35MORXKvDZTw72sL31SLbihg8rqtcyhvGAHwvRbwYnPkrmx4eAgJ2S8vQGF enm5GaHLVbVc9SvQ9YCcYRC/eKo6l8wc6HX3Z4ZgO1k+hTPpF22yaNvsPv+mcm13 ahp9rZiGPdUvgLOyDb/N7+Q1Eo+/O1Kb9/hjUa1SC5F+6VupsyEtCqvcX6jnACJD iFobtYfu85Yo2aLwTO5tBuvSbYCArTWMTf0sYM8MEwPgSkGshDDKm84KjdEYvDRK NLBTo/y8BJkqWOXTkfRxzvkOW0+eRiFBNAUHg9TD374SiuCqVEDIrad3Egxxxsti 2c+Dl3iIylrulD7RJdQ3GTBzfAeEel6dQs/o5PI0UUbbz1WE0kXYr8ESN7mXCnoo u8ABjNgK1hEwGzNx8dDYGOWLSzInu6mRMG7Wocgo8ENdOKIpIMvLzwU4YFgNfzGl vinqWTHCcFfSREJz+NBRrICZFIyEiB/1asJPjGiz2KtZGnsb1TMHMboavgW0RcdB CmhhQ0+URlaWEp7GJnOyrdCvwBLVNSwyXqdaYf94LyzeVvG+MxDpYJmqyhQnHq+6 v4PdreM2TJ6GIvNNnpkEdakCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 293233485497435001008528034141023320932927 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 21:12:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 21:12:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumacone.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787468812156613634122585265214935315835798524438417447202260967177603876597845809065641622438530982635225035708855468265251580572299789884702274456734776936210003007717208297303491176243141357714072949094109809931844490426911845368256483858508914444373352432308208168766918740095428282747489832945333050438464517265073326032885581629456040146960596511847793329017144523023562592713937075694832035971587377861042753779095518707576344186363094825147012861358229193813017391444221378269252355428981691111851015154489077293157392975719209186652786305514152406030133204933538852160027901258850546715649915440527504342716816862650249704333221938820079794722052977056099437337321262322087056391272244207826928062962640160716526365758887658476208718164494130201788206661384733262105357046050919648066541298575373093396312871100048020643471682637639229496494764773404253908454745007104786881563724544693787852952225704937301025069643707207834762916399506233064188836578850574486636355254847113775141840773015241005187978165344802777122584257068927531871687816852251625115503856360421568519507242729560321352391406659059006067766252876543511817506044645029269847211191669559299029050443622347892161115251634623438746258764736407523406901441961 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9757822bd243542b630bd51f11e50d7df2a8a549 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumacone.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709301fc16000004030047304502200d605024b908d0950f5cb5b490c576d12a8bb7ce09caea6fd2db998ab3c50d85022100b58496024c60783e3c37c9890137ece2970effcbd6eb93c285b1abc2a6015d560076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001709301fc4c0000040300473045022100b3c26379f0bc4ca483d25785f6092f4a9f5ca175e292c30d82dc6c4ce30e62fc022022e722fc1ce9dbf4873f6227366bfd828ffe94800d3b383004bdc6e0896a0105 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00571a514d03ae72699ba016faf4085a55f6581b9675c057f190fb53bdfce738c81b71237795f1394d4fc5fdbce7ab2d94e69f4abcdf054aa64d411c913d12920ba4859ecfc0a1a57d32814d4251ff7a53e46cc56f82e7ccdf8c819fb82278a664afb8d8113d340ff323fd9e0fbfb3bcffb5f0a68685cd29db3b4a54b17e8dd2711a698625925dbc68c17e96f919ac9b636e080b1e5cfa8087f892893b5b170f730ee81b8b453507de87734e699e8a49704447981e7c89a14e9f23c8b944e519262b5b1d7f8e19199bac41927a630c2120244cc324ce36e1fce0a6c6ac46092741cc7217890baa5290b73d0c8f3132296e5e9598a16814d2c04a51037f3a1411f1