livoniastorage.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:dc:7b:60:f2:15:fc:f1:02:6b:57:9c:d8:89:a6:f8:3e:e6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=livoniastorage.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:dc:7b:60:f2:15:fc:f1:02:6b:57:9c:d8:89:a6:f8:3e:e6Serial Number (int): 336362976931952362979159766846787666067174
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 55:a8:92:0e:e4:07:b2:38:5f:bd:76:6a:04:22:6a:85:41:c1:41:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bd:f1:22:e7:51:c9:29:b5:af:5f:72:94:52:d0:c4:1c:72:9b:b0:cb
Fingerprint (sha256): 9d:fd:30:de:fb:43:17:fe:99:ca:69:81:7e:1b:9b:87:58:34:ea:99:a2:39:a8:b8:fb:54:8a:c1:1f:74:ec:5c
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate livoniastorage.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for livoniastorage.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
livoniastorage.com
Other certificates including the domain name livoniastorage.com
(limited to 100 certificates)
www.laglab.com
livoniastorage.com
www.destroyer666.com
www.onlinejurisdoctorate.com
polylogic.com
www.sanilite.com
electronic-enclosure.com
champagne.fund
www.thesundaystroll.com
livoniastorage.com
exerpod.com
enriqueguzman.com
www.myfxfunds.com
www.maternallevelsofcare.com
europaganus.org
stuffedanimals.world
aglaem.com
www.jet-cleaning.com
livoniastorage.com
www.destroyer666.com
www.onlinejurisdoctorate.com
polylogic.com
www.sanilite.com
electronic-enclosure.com
champagne.fund
www.thesundaystroll.com
livoniastorage.com
exerpod.com
enriqueguzman.com
www.myfxfunds.com
www.maternallevelsofcare.com
europaganus.org
stuffedanimals.world
aglaem.com
www.jet-cleaning.com
Certificate
The complete raw certificate details for livoniastorage.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISA9x7YPIV/PECa1ec2Imm+D7mMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMjIwODQxMjRaFw0y MDA1MjIwODQxMjRaMB0xGzAZBgNVBAMTEmxpdm9uaWFzdG9yYWdlLmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMnMKlovs3Nx/hmSK89zqDg6+86h erJa8uEx+p/FnD1rtXrBUfMytqWiS7VtD08Au2asO4609uWbkP0aQW3aZP/46g1t rqT8lVkajUQcIaawmlnmJkUSNrdmR+CkEcJdKqCbxJ9JbfTmk/8UYw6m/oJMpa5n trrRor3vgirQp/Ao1k1aDqXARnjNoRlu5pQUjAJT3T1D8CLJMylU5gvOT5bnAjDk 8Q0m2Nop/g6tnZwxI+xA5VVEC36+lsiMmXuGdl4Tqk7pB6ZZPRF2A1NuI+xur3Gz MMJaTpOzfz4rxF54H7iXyCo+4VMKR1EQl3Cw01EWy7t0nuAdSraUHJ4AykjKL4pj zjYEgAr3w3hVl6rptQotr4MDfSsSMuBdqQz8hUGcYKn1NjvpB9tEvWGngLKyEN2E A3IrI9Y7xvcGCKEbhL8x1dlocAPzU///jW+63Nz9/8M7apPGakyuL3CyG2a4qMAz RNpi/DS/7rgHJ1jozyqU8KHM2cSP9DPhgSTZFy9rTtK5q/KT5KXvDDTcwTmCF8Kv Cvot7QOciEzD20m+v6Qev0lwMlnwsaOlGlXrKtetMKfCQSKEeXkLs5PQSfaipHqB w4UBPhOf+ScyamrTBSswmZwdIoI7aPRTSpikPI1641spqf4+CXJnY6OXW81BUYCr sOX8EdT7k2Z8YQJ5AgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FFWokg7kB7I4X712agQiaoVBwUHWMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISbGl2b25pYXN0b3Jh Z2UuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMA AAFwbEXiCgAABAMARzBFAiBP3txe0Jxo9or7hYNdyTWw5hxdy6diNZKVIXC2baBT dAIhAKvy+oeUBn6HaK4yiA5XmbrAErcfAXPpFDHReNl47Z0mAHUAsh4FzIuizYog Todm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwbEXiLQAABAMARjBEAiBZUeXnQ035 LCv14736wcGwwN3RZwMvAucXzgboTQACTgIgDqCFwVlotok9jE+0pHRg5GOOJysO RsDpQHylef9dMx4wDQYJKoZIhvcNAQELBQADggEBABCNqhvR2Qcmn+hPGztf77Q4 V/a3IXa9t4kuUL+QQ5r6Z4BhfgrDsunWtKRCyYWNW/Xnt3sWJaj8tsJlcVRl73w2 aM5yMLXm+QJUps6A40D/CdJt89agyYxtjEJxzLfOYubGQcP/6XX9LQ/L2oC+huMe +Wb13F48Hin8VTHpQSq0a+jgGKDhNGyrBxWyeor5r8xolvYX8kmtgYTxM9aWMaNQ uGh2AAtGMn4cwtbiyYUP57sGU6pu1XJXmL8iPUXp9i9vK6xrUhiPHogkV/EJxqMV Ruy1LXgm3hJATE4X+M+f5UhHWxBusa3DrsJO4DKPb/KJmmuzE+xXCX+5xvllfXY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAycwqWi+zc3H+GZIrz3Oo ODr7zqF6slry4TH6n8WcPWu1esFR8zK2paJLtW0PTwC7Zqw7jrT25ZuQ/RpBbdpk //jqDW2upPyVWRqNRBwhprCaWeYmRRI2t2ZH4KQRwl0qoJvEn0lt9OaT/xRjDqb+ gkylrme2utGive+CKtCn8CjWTVoOpcBGeM2hGW7mlBSMAlPdPUPwIskzKVTmC85P lucCMOTxDSbY2in+Dq2dnDEj7EDlVUQLfr6WyIyZe4Z2XhOqTukHplk9EXYDU24j 7G6vcbMwwlpOk7N/PivEXngfuJfIKj7hUwpHURCXcLDTURbLu3Se4B1KtpQcngDK SMovimPONgSACvfDeFWXqum1Ci2vgwN9KxIy4F2pDPyFQZxgqfU2O+kH20S9YaeA srIQ3YQDcisj1jvG9wYIoRuEvzHV2WhwA/NT//+Nb7rc3P3/wztqk8ZqTK4vcLIb ZriowDNE2mL8NL/uuAcnWOjPKpTwoczZxI/0M+GBJNkXL2tO0rmr8pPkpe8MNNzB OYIXwq8K+i3tA5yITMPbSb6/pB6/SXAyWfCxo6UaVesq160wp8JBIoR5eQuzk9BJ 9qKkeoHDhQE+E5/5JzJqatMFKzCZnB0igjto9FNKmKQ8jXrjWymp/j4Jcmdjo5db zUFRgKuw5fwR1PuTZnxhAnkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 336362976931952362979159766846787666067174 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 08:41:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 08:41:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livoniastorage.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 823262060486962729765656537773623714142224220893048944798616600533006321548041344487420066113473039491659530021749388231247244369576690944791341791430298877267998919101470833466582559484339906443101396306761345825112520371606556111144963397748518984767396279420341286615526092988473680799762342476856297490314004908502895501140269109605804270500019948558285340369305274670947410120605507644403222453959743021751700255615836262802139557169007628810028702522655500521545783573317015397349401769779447378969610057771928428705484198449435753765327161488586758988470033697336679950504371015079744940446463847060213044481995041141658187447465608576889614879947314007524523356014632557952525894020288436583890328045553795629940205513517296229120989662573134605172344816081487753616236979405784759395104491534419781939825183977453925488949078399665640277094025648479439946392020820610153589515045065055746940828346879472533029162498965531793612685864309992260711574196361938669627114582855162170737114478254346169315648039658383992174927859194201963631449455631151101754981273976901777329466672102142816604244657384889236824966210361999694052074383007520030704277053915285237956056851644240394648416295798763662303748049345223198737751409273 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55a8920ee407b2385fbd766a04226a8541c141d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livoniastorage.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001706c45e20a000004030047304502204fdedc5ed09c68f68afb85835dc935b0e61c5dcba7623592952170b66da05374022100abf2fa8794067e8768ae32880e5799bac012b71f0173e91431d178d978ed9d26007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706c45e22d000004030046304402205951e5e7434df92c2bf5e3bdfac1c1b0c0ddd167032f02e717ce06e84d00024e02200ea085c15968b6893d8c4fb4a47460e4638e272b0e46c0e9407ca579ff5d331e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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