www.ltico.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d9:d7:c6:0a:cf:99:ca:64:97:80:f1:fa:5b:fa:1c:7e:99 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ltico.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d9:d7:c6:0a:cf:99:ca:64:97:80:f1:fa:5b:fa:1c:7e:99Serial Number (int): 335464943730268054881487804073343291522713
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 64:df:1a:5d:c4:e8:73:25:20:a4:6b:95:78:64:b5:43:5f:d2:1d:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3d:53:69:b0:03:cb:65:1d:b4:5a:62:27:81:30:03:1a:5b:8c:42:e2
Fingerprint (sha256): 97:17:de:ac:09:9b:32:6f:6e:05:59:b3:76:43:03:94:44:66:85:65:97:d0:22:87:0f:75:19:61:64:0f:fd:16
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ltico.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ltico.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ltico.com
Other certificates including the domain name ltico.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.ltico.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA9nXxgrPmcpkl4Dx+lv6HH6ZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTkwMDEzMjdaFw0y MDAzMTgwMDEzMjdaMBgxFjAUBgNVBAMTDXd3dy5sdGljby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDyyZPpbdo1F9qElg7kLNg1M4qiN19CrCIL SJtRuM8FinWOL7w8skmqn7IvpKStHm4NzB1PtITT5lDD9t/CK2gs/sWewg04Fzbh AvzUGAljMpbzt73agIlXZIUxT+a7kyB8JxVESvT3ecWRXO53didjNg61tLENFguf Ww3M1AL+KUMG1oW13Ojkfw7WQkvbdfaKkJxdRUmjCRKVo/AG0MtzCIoUwgYTsfBq upQ7AOPmgWrmPvYliE4+hnCe1IUZDdXkbvg9Qfwu+e9OZpkjAiGN9Yc6PgxhOGYF rUGRYrIXo6XZc6uPwDoI1SRXSsevna/6SraPofDitOd0mIWeX8dArB14olBrtuNm IYxeKpdyadjCXg/kq0y58f1VigMwpBp97k4ekAll4w2Ik5ebn1qR70VdxPTKObk/ lQcZDZaURzBXX+B4iyhymMg800EYOtgOnq99Celm4jAYd0NqwFypJReGEzzv1wVB Wgigy9ZiFmIE9xx8Up2sp2p6s+rtqRZMTmI6ON9j0ZQvWrwlmQQQhga4ILxQMAc2 YUieNJfYofQYsR+s47wh57mppxg1YaIZDbW4R5aSMUD6XqbBlj4qUi0p66D3V9Kl QFEXKydQ3QhMHU6LXk4EbQCEw8XeUshsroOoOkZnQo6qmSZvVnyxANKCwwMU/b/Y EBfoUXDVRwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRk3xpd xOhzJSCka5V4ZLVDX9IdZDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5sdGljby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW8bt3xEAAAE AwBGMEQCICF6eg87bqgIvUfwtw4ayEfqC84mV8NJ01LJaxMNY7E8AiA1fWxMXLFF zeCpKWeu8Fn2JUNqYK5XBlVgu6ujrSLkHAB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX lLdq7rxhOhpp06IcAAABbxu3fGoAAAQDAEcwRQIgYdLwR5spBkibPV5mO4QWjbkx ia+3bqrZu9jiIxpgMegCIQDpuVT94031uuqEuOSawWv15bwFnvjO9Tg3pZSi5St6 wzANBgkqhkiG9w0BAQsFAAOCAQEAaD4JnbgGcvxLoqZGMHmHGiawTr28QtXiwLB/ bcT/4BjMt2BgbgFyDf09kbof32duVK/1DjTkhhhDeK/j8/V8hktatNiihVNZi4rR 3gbB3HwamPVRCRSvImHIjK0nRh7FSk17CF9s5EDRH29WSA7NHl3tYq9ej1Dk/cTO H96ftUL8yU8b2XizjA2RFVwty77b5mYiyxSLcpto0EjsXYcM4HtQuh1ddkVMkqu1 rmuBy1n7gm21/FyHOpQKCSDN5oyNUbi976+N868pyj+4yYBdh9nyM5zr2FPS+7Nj ZwyOx3l0/9Jnovovm6sCyJuxnSqi4uzl5nqwsZnaBxaC1aGTKw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA8smT6W3aNRfahJYO5CzY NTOKojdfQqwiC0ibUbjPBYp1ji+8PLJJqp+yL6SkrR5uDcwdT7SE0+ZQw/bfwito LP7FnsINOBc24QL81BgJYzKW87e92oCJV2SFMU/mu5MgfCcVREr093nFkVzud3Yn YzYOtbSxDRYLn1sNzNQC/ilDBtaFtdzo5H8O1kJL23X2ipCcXUVJowkSlaPwBtDL cwiKFMIGE7HwarqUOwDj5oFq5j72JYhOPoZwntSFGQ3V5G74PUH8LvnvTmaZIwIh jfWHOj4MYThmBa1BkWKyF6Ol2XOrj8A6CNUkV0rHr52v+kq2j6Hw4rTndJiFnl/H QKwdeKJQa7bjZiGMXiqXcmnYwl4P5KtMufH9VYoDMKQafe5OHpAJZeMNiJOXm59a ke9FXcT0yjm5P5UHGQ2WlEcwV1/geIsocpjIPNNBGDrYDp6vfQnpZuIwGHdDasBc qSUXhhM879cFQVoIoMvWYhZiBPccfFKdrKdqerPq7akWTE5iOjjfY9GUL1q8JZkE EIYGuCC8UDAHNmFInjSX2KH0GLEfrOO8Iee5qacYNWGiGQ21uEeWkjFA+l6mwZY+ KlItKeug91fSpUBRFysnUN0ITB1Oi15OBG0AhMPF3lLIbK6DqDpGZ0KOqpkmb1Z8 sQDSgsMDFP2/2BAX6FFw1UcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335464943730268054881487804073343291522713 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 00:13:27 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:13:27 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ltico.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 990486230073571323176978356416180957939837602499443455072624975467102372126244429132397460758944692706603634074247011948363368738221506688749017760197995313416550329057777410215261644155568570322728392552120163800748007195209042427960189094735646151041395688112431037479630255418425842163862655874880714709509815299066904262345296263488741764466975339603727920809302271868584719019880735018271741359603247401531488303048334561303649101717846888322402307997803711692483034610434581338717979014820921827337353081118157496207880077974628906566106635496261894762765084775707624604219039248236677243206370083343041680829383919260402115146909702419891014172853159949010468390597255539702116678535128021894228146086214708706891077713622190439067457590578574604750164933344746285915374608668061081628540597184239130345557486610233787371059214528092816573001611710211281477603718218045916761843488180610800342231527642646042446528634423826587856720520543667335986175695224851536064385035783122902397112286972514032660811196818321271851741498550329063750076617914870954760991787658606832012587958617234445178016961997580167427200749420213584961254590258826006024299948994288969838102694021533264711814828660881478265468904299343386095693911367 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 64df1a5dc4e8732520a46b957864b5435fd21d64 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ltico.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1bb77c4400000403004630440220217a7a0f3b6ea808bd47f0b70e1ac847ea0bce2657c349d352c96b130d63b13c0220357d6c4c5cb145cde0a92967aef059f625436a60ae57065560bbaba3ad22e41c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1bb77c6a0000040300473045022061d2f0479b2906489b3d5e663b84168db93189afb76eaad9bbd8e2231a6031e8022100e9b954fde34df5baea84b8e49ac16bf5e5bc059ef8cef53837a594a2e52b7ac3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00683e099db80672fc4ba2a6463079871a26b04ebdbc42d5e2c0b07f6dc4ffe018ccb760606e01720dfd3d91ba1fdf676e54aff50e34e486184378afe3f3f57c864b5ab4d8a28553598b8ad1de06c1dc7c1a98f5510914af2261c88cad27461ec54a4d7b085f6ce440d11f6f56480ecd1e5ded62af5e8f50e4fdc4ce1fde9fb542fcc94f1bd978b38c0d91155c2dcbbedbe66622cb148b729b68d048ec5d870ce07b50ba1d5d76454c92abb5ae6b81cb59fb826db5fc5c873a940a0920cde68c8d51b8bdefaf8df3af29ca3fb8c9805d87d9f2339cebd853d2fbb363670c8ec77974ffd267a2fa2f9bab02c89bb19d2aa2e2ece5e67ab0b199da071682d5a1932b