lumacone.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:bc:5b:0a:a9:e7:79:3e:58:a7:7b:64:00:bb:90:02:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lumacone.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:bc:5b:0a:a9:e7:79:3e:58:a7:7b:64:00:bb:90:02:3f
Serial Number (int): 293233485497435001008528034141023320932927
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:57:82:2b:d2:43:54:2b:63:0b:d5:1f:11:e5:0d:7d:f2:a8:a5:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:8a:eb:9c:22:c5:8a:6f:d8:b3:7b:e8:6e:fb:15:40:23:26:1d:80
Fingerprint (sha256): 76:37:8b:cf:45:92:ec:a0:40:07:4e:f4:5c:39:81:74:ec:77:67:dc:fc:99:4b:5e:bd:ee:4e:a0:c5:f5:87:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lumacone.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lumacone.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lumacone.com

Other certificates including the domain name lumacone.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lumacone.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293233485497435001008528034141023320932927
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 21:12:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-29 21:12:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lumacone.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787468812156613634122585265214935315835798524438417447202260967177603876597845809065641622438530982635225035708855468265251580572299789884702274456734776936210003007717208297303491176243141357714072949094109809931844490426911845368256483858508914444373352432308208168766918740095428282747489832945333050438464517265073326032885581629456040146960596511847793329017144523023562592713937075694832035971587377861042753779095518707576344186363094825147012861358229193813017391444221378269252355428981691111851015154489077293157392975719209186652786305514152406030133204933538852160027901258850546715649915440527504342716816862650249704333221938820079794722052977056099437337321262322087056391272244207826928062962640160716526365758887658476208718164494130201788206661384733262105357046050919648066541298575373093396312871100048020643471682637639229496494764773404253908454745007104786881563724544693787852952225704937301025069643707207834762916399506233064188836578850574486636355254847113775141840773015241005187978165344802777122584257068927531871687816852251625115503856360421568519507242729560321352391406659059006067766252876543511817506044645029269847211191669559299029050443622347892161115251634623438746258764736407523406901441961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9757822bd243542b630bd51f11e50d7df2a8a549
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lumacone.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709301fc16000004030047304502200d605024b908d0950f5cb5b490c576d12a8bb7ce09caea6fd2db998ab3c50d85022100b58496024c60783e3c37c9890137ece2970effcbd6eb93c285b1abc2a6015d560076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001709301fc4c0000040300473045022100b3c26379f0bc4ca483d25785f6092f4a9f5ca175e292c30d82dc6c4ce30e62fc022022e722fc1ce9dbf4873f6227366bfd828ffe94800d3b383004bdc6e0896a0105
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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