growmo.re
Issued by R3
About this certificate
This digital certificate with serial number 04:ea:b7:50:d0:7b:30:77:fd:c4:1c:e9:64:4d:f8:3d:6f:05 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=growmo.re
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ea:b7:50:d0:7b:30:77:fd:c4:1c:e9:64:4d:f8:3d:6f:05Serial Number (int): 428318885922019171317699221001162790366981
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 3d:7a:fd:a2:7f:d1:93:b5:69:c6:d4:bb:80:13:da:a0:2e:22:93:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): d9:b3:9d:b6:c8:0d:a3:ce:fe:43:3a:1d:32:26:4d:c8:68:8f:e9:9e
Fingerprint (sha256): 77:93:5b:83:9a:9e:3d:c9:d9:db:fa:ba:c7:b3:e8:cb:3d:89:b2:dd:fc:e1:02:27:6f:0a:1f:ad:ef:71:f4:b4
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate growmo.re
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for growmo.re
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.growmo.re
growmo.re
growmo.re
Other certificates including the domain name growmo.re
(limited to 100 certificates)
Certificate
The complete raw certificate details for growmo.re in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgISBOq3UNB7MHf9xBzpZE34PW8FMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTIwMTI2MzZaFw0yNDA2MTAwMTI2MzVaMBQxEjAQBgNVBAMT CWdyb3dtby5yZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMKA3KJu HRGUsbd8vn/f+X6yEYudNdUMw4mjg2puZTiOb+7OaBGXdCiBllsFUL3EzIZPCgnA MA/4CmIA/hLVR3pvvfHwd8Eq/49V7Rmue5IJmy6SQb3JqUe3ORQZ7jrtqQXyL4ml g9WIaI/ceQ5G9S7rVF4zZZZq5vwiEyNoRv40P8vVnqePwiZGk2EZEKDvKAcrqmWc mbYLgd3G5u3tZoVQaJ4m6hK1u16buo7P+D9O5T2345QmJkRbWDOjWijgr0TSE6bu KZn0C9hapMikPjdHw95EY7WkcXRW8pWHJr38pELZdlf08cSBeqJqFeYuwcUOmrz4 DybNnBYuis+Bh8kCAwEAAaOCAhgwggIUMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU PXr9on/Rk7VpxtS7gBPaoC4ik9wwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+v nYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5s ZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wIQYD VR0RBBowGIILKi5ncm93bW8ucmWCCWdyb3dtby5yZTATBgNVHSAEDDAKMAgGBmeB DAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AEiw42vapkc0D+VqAvqdMOsc UgHLVt0sgdm7v6s52IRzAAABjjB7sQ0AAAQDAEcwRQIhAPpbRTIYc6HU906Fc8RX UJwdJu1/qbCllDWuTZ0fIIeqAiATZt41oEs+1XxuEttu9vWOPU2OVNBcd4pL22bF umZ+uwB2AKLiv9Ye3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjjB7sXkA AAQDAEcwRQIgO/uE3mjpUww4rV5l6XFsmSgbahlNC71ukM6y58ONGUACIQDmtTbn EJ2UoNGATEQ0ks6PxFGBzmQCqwuuYQyoW5MdbTANBgkqhkiG9w0BAQsFAAOCAQEA UGtEDDOzvFUZ3Q0r7g3gR9muTgnnflHrEBKiLQO//wEGm2NpK3VpPj8En01eF4yY 393Xru7U+X34s0OrJmS3xQkg9pH5EbfZaGI1lk1K6iIukQ+6/XjDmgCONtR3Hrqp 38UsSXDySXeX7zigLUcmJcDPx6RrM6dsEPK2JZkva9hM7/mrlnsxvlc7k4Af0HTs ASXFt61cNp4ESAe9/eGn2cLxZaRqsRjgvWRSxJY2Jw4QTqYUadOGu4nmWCQurDRZ lTaQqhFHtAp0mNr273b8UjxdC8VCPUvXDy0BQwZJ1phjaPnf8BvB2xn87bX1r/sq IQGOtM0fbuVHbk1/5BD8Sw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoDcom4dEZSxt3y+f9/5 frIRi5011QzDiaODam5lOI5v7s5oEZd0KIGWWwVQvcTMhk8KCcAwD/gKYgD+EtVH em+98fB3wSr/j1XtGa57kgmbLpJBvcmpR7c5FBnuOu2pBfIviaWD1Yhoj9x5Dkb1 LutUXjNllmrm/CITI2hG/jQ/y9Wep4/CJkaTYRkQoO8oByuqZZyZtguB3cbm7e1m hVBonibqErW7Xpu6js/4P07lPbfjlCYmRFtYM6NaKOCvRNITpu4pmfQL2FqkyKQ+ N0fD3kRjtaRxdFbylYcmvfykQtl2V/TxxIF6omoV5i7BxQ6avPgPJs2cFi6Kz4GH yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 428318885922019171317699221001162790366981 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 01:26:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 01:26:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'growmo.re' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24553775311692704729557871230060468863992122645462924213194838548037800689228507184964079717390428862488682153224957344929203150782841676450449032736088813760460662748359618046946993124654365717726543251504224525150068172604086827359514021710117144614538835589084218963237196134225735518353204902135835136664251275303861732092763429469309185734761099538899077358376057932319642116570024897789587419984611218305909648599174451820559454626310094775986879718022083046958766479190878253844745462096024768868663018342605274083073614849491550904398293496985827839939973357414589266745352237371866940447990932919643275364297 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3d7afda27fd193b569c6d4bb8013daa02e2293dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.growmo.re' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'growmo.re' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e307bb10d0000040300473045022100fa5b45321873a1d4f74e8573c457509c1d26ed7fa9b0a59435ae4d9d1f2087aa02201366de35a04b3ed57c6e12db6ef6f58e3d4d8e54d05c778a4bdb66c5ba667ebb007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e307bb179000004030047304502203bfb84de68e9530c38ad5e65e9716c99281b6a194d0bbd6e90ceb2e7c38d1940022100e6b536e7109d94a0d1804c443492ce8fc45181ce6402ab0bae610ca85b931d6d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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