goodgreencanna.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f7:70:92:41:c5:7a:f0:ab:4b:2f:52:5e:0f:ee:19:21:28 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=goodgreencanna.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:70:92:41:c5:7a:f0:ab:4b:2f:52:5e:0f:ee:19:21:28
Serial Number (int): 345536235369624417452899366325873976877352
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:88:b2:6d:53:50:06:99:91:48:11:76:54:69:64:b9:05:1d:dd:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:13:13:67:f4:cc:3f:f4:1a:1a:91:cb:94:59:84:e4:2c:b0:70:fa
Fingerprint (sha256): 98:6a:46:89:b7:66:0c:92:b3:65:46:02:11:2c:17:df:cb:4c:25:72:aa:25:96:a6:c8:db:d5:f0:c9:12:bf:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate goodgreencanna.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goodgreencanna.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goodgreencanna.com

Other certificates including the domain name goodgreencanna.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for goodgreencanna.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345536235369624417452899366325873976877352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 08:30:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 08:30:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goodgreencanna.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680609085337288475045426810659976398324963836309503793626598161481708918716669446205591942726541146374319978767934118004251863805247066061227443768293074890520161063153330648844721390436237315890792234827158763355359225133382076775816425985698330485306443204540264259688634629277876129837784924089585186090183830153191127172330115299680392738207248015982920318504488421208344332342991918628172203526821667312574750072177578251856226356012386247685463289371136758836124565477898799805435866522758998556414530042636684823960181785044530261972687152511997118348923702643007253578302176203398038930744013999562515759752918330539935822296475092905845163927335166864431373266994300665472813611623553368013110041053164014503785820778644911161028157885141903637882868137387293161074108927836333030096885896754222526578756109425587183974680078801191397919459460855941887762995034283118270883639020743430203768876058469302883440676269566564530644900372600740450333861226489790685246221289618204691410041968555521129266141415225736041497836959231092433746115731543341408504889783983225112270146919136127674381009748436514851767446021723751403367828956741410837237460576379741161489087110841304644470218337742174045654130982592285565284352597211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3088b26d5350069991481176546964b9051ddd3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodgreencanna.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f0e0bbeb20000040300483046022100a21fd3dcbb9811ccfb87159157c4d8c992d782dc49712bb6f1917534872c600502210088589f46c2fc53fe02417734c95b1a97ad8c50b1d11fee621f3426f0cf4cf2e500750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f0e0bbecb000004030046304402207a7a008a3f2867a68ee0f437baa4685cfdc8c9ff50dd527d7639fa8b1f9db224022039dca8ff63fa3d6ed72691372c480052d92caa2507eefe27f7b691c6c62aac7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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