www.lipmate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:b8:71:41:26:08:07:19:56:4e:32:f2:98:55:70:0b:52 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lipmate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:b8:71:41:26:08:07:19:56:4e:32:f2:98:55:70:0b:52
Serial Number (int): 262262588531261834698045919510618361039698
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:13:ca:c1:2d:db:26:0c:52:bb:16:77:29:00:76:11:91:6f:53:2b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): be:eb:d3:9e:df:95:49:ed:48:da:2e:75:ec:06:5a:21:ec:7e:0b:b8
Fingerprint (sha256): 9c:97:c5:77:64:34:5f:2c:6f:d3:06:04:79:0a:1c:54:d1:48:ce:49:11:2d:1b:c8:36:e9:c3:30:60:06:8b:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lipmate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lipmate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lipmate.com

Other certificates including the domain name lipmate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lipmate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262262588531261834698045919510618361039698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 04:39:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 04:39:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lipmate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731586110142038692750115334453353443480293854739029854863631085511540688476411816632241612502858815069205830645378799606984561108112134329884502830765092011849767139400809277208114735372845989821318856889898340827492436619130523998729934870223232808731506064472744926358161407864302529702498097957615773625245257764150488931549570834308786424676705098297569853609038924141032417065943682666080016305732732676877643541031418823596527682975324969696296216166392509712333924142905593954530474834670581609528678223101511590062931287878877341278749513045604818239300064154068171157391546996250012441429205040700321778893960391473961807350291262802992816675692600241759328303157326237204884347620277561332569233436430142062462069532418534453392200190957741717304040580538018095494295466317606358370019322940011778596933271442155412426943111573425282476245815427203591066254961363299798988370750750257818585768262859237585178709133241215886330642925020361795314203414210780675521337940141879897027365214894622756567670460010041821219683981435901998101374197036026663295852325703585392584422368019291787714867953120114590872041645668359876554587933929014822472082984177060655532019759613543219811041804410221257824883251454893708484044140641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a313cac12ddb260c52bb167729007611916f532b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lipmate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe7a6ee50000040300483046022100cbe5cb0f1e7816d8fdc9c46a7dd6e81eccb19d7fcba154f6dfc8f8a4b589ec3b022100934e65cfc65aaf3e466f66be587bf4fc286871b496e88d40853a5e131771c4cc007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbe7a6eea000004030046304402200de62b59b4d66ccebdd43f8b916325077319ab5fd23c337eb1e0f20e0aad8b33022019f0794f6686aae12920cc0be212a1a4721115dd8346ae07a4ed207ea008960a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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