www.ltico.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d9:d7:c6:0a:cf:99:ca:64:97:80:f1:fa:5b:fa:1c:7e:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ltico.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d9:d7:c6:0a:cf:99:ca:64:97:80:f1:fa:5b:fa:1c:7e:99
Serial Number (int): 335464943730268054881487804073343291522713
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:df:1a:5d:c4:e8:73:25:20:a4:6b:95:78:64:b5:43:5f:d2:1d:64
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:53:69:b0:03:cb:65:1d:b4:5a:62:27:81:30:03:1a:5b:8c:42:e2
Fingerprint (sha256): 97:17:de:ac:09:9b:32:6f:6e:05:59:b3:76:43:03:94:44:66:85:65:97:d0:22:87:0f:75:19:61:64:0f:fd:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ltico.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ltico.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ltico.com

Other certificates including the domain name ltico.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ltico.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335464943730268054881487804073343291522713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 00:13:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 00:13:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ltico.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 990486230073571323176978356416180957939837602499443455072624975467102372126244429132397460758944692706603634074247011948363368738221506688749017760197995313416550329057777410215261644155568570322728392552120163800748007195209042427960189094735646151041395688112431037479630255418425842163862655874880714709509815299066904262345296263488741764466975339603727920809302271868584719019880735018271741359603247401531488303048334561303649101717846888322402307997803711692483034610434581338717979014820921827337353081118157496207880077974628906566106635496261894762765084775707624604219039248236677243206370083343041680829383919260402115146909702419891014172853159949010468390597255539702116678535128021894228146086214708706891077713622190439067457590578574604750164933344746285915374608668061081628540597184239130345557486610233787371059214528092816573001611710211281477603718218045916761843488180610800342231527642646042446528634423826587856720520543667335986175695224851536064385035783122902397112286972514032660811196818321271851741498550329063750076617914870954760991787658606832012587958617234445178016961997580167427200749420213584961254590258826006024299948994288969838102694021533264711814828660881478265468904299343386095693911367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64df1a5dc4e8732520a46b957864b5435fd21d64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ltico.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1bb77c4400000403004630440220217a7a0f3b6ea808bd47f0b70e1ac847ea0bce2657c349d352c96b130d63b13c0220357d6c4c5cb145cde0a92967aef059f625436a60ae57065560bbaba3ad22e41c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1bb77c6a0000040300473045022061d2f0479b2906489b3d5e663b84168db93189afb76eaad9bbd8e2231a6031e8022100e9b954fde34df5baea84b8e49ac16bf5e5bc059ef8cef53837a594a2e52b7ac3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00683e099db80672fc4ba2a6463079871a26b04ebdbc42d5e2c0b07f6dc4ffe018ccb760606e01720dfd3d91ba1fdf676e54aff50e34e486184378afe3f3f57c864b5ab4d8a28553598b8ad1de06c1dc7c1a98f5510914af2261c88cad27461ec54a4d7b085f6ce440d11f6f56480ecd1e5ded62af5e8f50e4fdc4ce1fde9fb542fcc94f1bd978b38c0d91155c2dcbbedbe66622cb148b729b68d048ec5d870ce07b50ba1d5d76454c92abb5ae6b81cb59fb826db5fc5c873a940a0920cde68c8d51b8bdefaf8df3af29ca3fb8c9805d87d9f2339cebd853d2fbb363670c8ec77974ffd267a2fa2f9bab02c89bb19d2aa2e2ece5e67ab0b199da071682d5a1932b