www.liftingmaster.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:97:23:da:5d:71:be:e1:5f:47:b6:df:1f:57:b3:49:4c:de was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.liftingmaster.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:97:23:da:5d:71:be:e1:5f:47:b6:df:1f:57:b3:49:4c:deSerial Number (int): 312767151996186030684656317542237335014622
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ba:75:26:e4:e2:00:14:a4:c5:9e:f2:02:d2:b6:c9:b5:f0:2a:e3:45
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 51:73:d2:fc:44:f0:16:ed:89:31:99:ab:38:10:98:fd:61:48:85:46
Fingerprint (sha256): 7a:77:3e:f6:de:e8:f4:d7:a0:90:7d:e9:47:9f:90:b4:a0:c3:25:01:03:86:70:e1:0e:df:47:23:4b:93:9e:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.liftingmaster.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.liftingmaster.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.liftingmaster.com
Other certificates including the domain name liftingmaster.com
(limited to 100 certificates)
www.brailcom.com
liftingmaster.com
bettenhalle.de
liftingmaster.com
roomsinistanbul.com
www.liftingmaster.com
liftingmaster.com
liftingmaster.com
porcia.org
www.liftingmaster.com
liftingmaster.com
www.liftingmaster.com
www.apermanentmakeup.com
www.liftingmaster.com
gvnco.com
www.enwir.com
prpaustin.com
kimberlypalmer.com
liftingmaster.com
bettenhalle.de
liftingmaster.com
roomsinistanbul.com
www.liftingmaster.com
liftingmaster.com
liftingmaster.com
porcia.org
www.liftingmaster.com
liftingmaster.com
www.liftingmaster.com
www.apermanentmakeup.com
www.liftingmaster.com
gvnco.com
www.enwir.com
prpaustin.com
kimberlypalmer.com
Certificate
The complete raw certificate details for www.liftingmaster.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISA5cj2l1xvuFfR7bfH1ezSUzeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYxNDE2MjBaFw0y MDA1MTYxNDE2MjBaMCAxHjAcBgNVBAMTFXd3dy5saWZ0aW5nbWFzdGVyLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANTs+V7qRb1abSeVC5VlsyU1 65IWIQdBvqbdtmDve1a8uH8ej8VPBFKUyVVhKbsnUiDy01O6TKbPrW9ZJw46FQqD 53Zr+ETQsl4LAx/gYhlwG9HTddjozgEkXsu4fRlNBho/XaRx0GfYICLGI/lo6iUx XBXrjOtdEO18a6l29LyY5aza7nJ/zNFVTWceuldlOQlzrPbm7Pz2NnGckV5L1aXd dLa+xtT7ByXP6pCTD0PX05KjRIh1pPrVPGpo9zD6z+j37fCkH+RAMtSMuAOTn27K y21YoCFXIU68nYHxEzdJNlcBJKGl6A/gIoDYcByKq2NdSFBZYLH00fYo6R8j+ab7 DMV+iTrzvE1xx/Y6wy2gy9CCHuNIH/CuZcsJqHv8cVVjkjifDCDgQAJzZbfQ+k7d DWw6T+WWbgfeZuCvjBunj7apvzLnEJ845+gk/Y8ZZQTj3Lhcq87b9sE7/55K+7gH qujTzUubM6BPsIDgl31ZtPhNhC+9dotmqGxOYMmqSdtOTRbd1kiUQAEiizDkbiGY Hy0dRv2QItO1wZpqHQ21wTjFoV3nxj6Ap3FcnJ4PDCCPr2xCGBASSJR/Ha38w9sx pd3+aA4xMhUS6cYdGbdy/bFWR7uUpG96nEESdZm2145AJa1cJgJsiQ5tWglmqY4t 9VrJF76CJnydeQleHRCpAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFLp1JuTiABSkxZ7yAtK2ybXwKuNFMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3LmxpZnRp bmdtYXN0ZXIuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6 GmnTohwAAAFwTpJgmQAABAMASDBGAiEA2wqAYU5a1VmNgd9ydn+/LP6kOWXbZO8k VFeAlrLUQ/4CIQCguVUdkgnQZVDmIHK4Ij8DMu0EcEn4cRw7cVuJnfohKgB2AG9T dqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcE6SYQsAAAQDAEcwRQIg JtwWz22+R2gsQqUyGzOX7bclZPuWDzu61Aqf++LLVgACIQCYDiHHfB1wvVbb3Y3Y zpkwmoRBzIHGD8Q0IdLtAROAfjANBgkqhkiG9w0BAQsFAAOCAQEAJIIQRRcMrUKq 8d8DyrxCvZDpWI53EqZaPLo6YL39bJOhB1xQg9wHo6Xc0ib2wLx5iNlyK0Mtcoqh zLOGJIFE4YOap+1WUR5/FDhJULu2XOEjDiT3vmHq7jm4iYlXzhirupOlRLzo+hdd 9Eqt3srJZNpU7U0+OnQKOafyX7rRVOPr4+TWbk/8NhDAAUhAeYYjZfNQJ5AqKZoM vzffuyRf0qow4xmAu8kI6XiaSvse+gkSxNxjTDu/NwpX89XqnzJa8h1k5ZeXVBGr B9fr3Pxy+sKAaUf3dvfeBZv6cpdIrI+pJSGhKOtlM54hZb7nhuGvm7JUP69Z7qK/ HqTR/dqoxw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1Oz5XupFvVptJ5ULlWWz JTXrkhYhB0G+pt22YO97Vry4fx6PxU8EUpTJVWEpuydSIPLTU7pMps+tb1knDjoV CoPndmv4RNCyXgsDH+BiGXAb0dN12OjOASRey7h9GU0GGj9dpHHQZ9ggIsYj+Wjq JTFcFeuM610Q7XxrqXb0vJjlrNrucn/M0VVNZx66V2U5CXOs9ubs/PY2cZyRXkvV pd10tr7G1PsHJc/qkJMPQ9fTkqNEiHWk+tU8amj3MPrP6Pft8KQf5EAy1Iy4A5Of bsrLbVigIVchTrydgfETN0k2VwEkoaXoD+AigNhwHIqrY11IUFlgsfTR9ijpHyP5 pvsMxX6JOvO8TXHH9jrDLaDL0IIe40gf8K5lywmoe/xxVWOSOJ8MIOBAAnNlt9D6 Tt0NbDpP5ZZuB95m4K+MG6ePtqm/MucQnzjn6CT9jxllBOPcuFyrztv2wTv/nkr7 uAeq6NPNS5szoE+wgOCXfVm0+E2EL712i2aobE5gyapJ205NFt3WSJRAASKLMORu IZgfLR1G/ZAi07XBmmodDbXBOMWhXefGPoCncVycng8MII+vbEIYEBJIlH8drfzD 2zGl3f5oDjEyFRLpxh0Zt3L9sVZHu5Skb3qcQRJ1mbbXjkAlrVwmAmyJDm1aCWap ji31WskXvoImfJ15CV4dEKkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312767151996186030684656317542237335014622 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 14:16:20 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 14:16:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.liftingmaster.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868660987732222268477460942506283621769024844163683190150114869260205096401615266493003107089398480642324911426152543178505069097869312164636674445583557383707401109564206339398635645400330341728516307025411587238522834439686740045015832829032302250025396713582475489637919948395896501744887393694685632436673203646047958767449553063820540736912580087526231572472171564857132714641194073949494793607080262054910747336505026698338694260713219312635238653539322014620863379531844233960699399097709285229256040157066838500357805649699694896825842456559713230621988365946588240792400792072514163324802621831501250255848840230913679389008252113074268195278496817984322750753625388855512746840403195058640592738089606561766753591752865383624099785950495566443991746294063664819469663295483467177008245025962392220485251563818137944412105149267869134942047637054483120440702629447459492412096889205871176761136647464875078263272665367260134325884168515269389917367808224297292071509007692818357718551779279799122479362855914611935581079031878360154460396951065265081246221428479657864074240621910707288067992596600172872224762972707142951931598858963681779652487180989897457938650100108022926888069378929150352230925282319783298514791764137 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ba7526e4e20014a4c59ef202d2b6c9b5f02ae345 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liftingmaster.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704e9260990000040300483046022100db0a80614e5ad5598d81df72767fbf2cfea43965db64ef2454578096b2d443fe022100a0b9551d9209d06550e62072b8223f0332ed047049f8711c3b715b899dfa212a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704e92610b0000040300473045022026dc16cf6dbe47682c42a5321b3397edb72564fb960f3bbad40a9ffbe2cb5600022100980e21c77c1d70bd56dbdd8dd8ce99309a8441cc81c60fc43421d2ed0113807e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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