lignana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:14:56:30:08:06:1e:0b:dc:12:dc:a5:6c:e7:dd:f4:b0:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lignana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:14:56:30:08:06:1e:0b:dc:12:dc:a5:6c:e7:dd:f4:b0:72
Serial Number (int): 268257068134330166337981259915814539407474
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:f9:21:72:59:b2:c4:29:42:96:0c:05:1b:7f:f7:03:83:5b:e6:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:57:86:a2:ce:ff:16:ca:45:f9:2e:ed:91:4f:85:59:59:77:cf:0f
Fingerprint (sha256): a0:1f:01:ad:67:73:23:c6:b2:fe:c5:92:9e:1e:d0:88:84:e0:d4:2b:d0:2f:5c:e8:27:d4:ff:4b:93:d9:c3:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lignana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lignana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lignana.com

Other certificates including the domain name lignana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lignana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwzNapyHx82K0ENn3T+dN
AZn+e/W5KTkpfatOSyASgyz0Nh2QVhPMA17xwVSAnIW+8Y5JGWV1py+1Ah0GUYuI
f5iBhv1zsU4Uh8g7TSOdqcnPc6mmMK0O2qL3Bv+stPGswAyxmbL0q1t+v3yHZeLz
JYk3un8cK2+5k2MZ+jnCwMs8umgjs5ALq7x/F57ScimL+A1rkvSd9+6HoaIeZnL7
30M+6feMhn6V4O9IDM0Y+0WHZbKajAm1UwYsuprtK7eEP5hRK6gYXdtIid0Ykpzp
JKh1zTtPYZlyBNz2IchAjRyz6MDAjK9I21w36YGXVm9MX058X+GNzEB1Y9RPnThu
IlkUcxWhwIsy4raWbxNkyNI0Mq1ak0UHjiRT3Tf9K2pdRCr39JLuzhJpZMG0tU7E
JLqgQZrtN1T6s4kKNWQ3H1VdS3Y+43+E4XC2HouzAQZSQeoU6D2tb3Z0h/QzYA8B
BP3wqUfa4qH7q51xcw2GCVyB0ok13MYiGTJ3rU4mdsXNcgXWZONbBSdprxRDtHbf
UKaRctPER1W+Ktjo3nwERTl+UE/kHkHgv+sx3aCJDEp4PXl9hWjCrtTXsCgX/fDq
L9KNyCELvTNPo1v7n2vuxCQ8Pxmx4rMdRnb0yelhPIV3mOItIl7W7IDwfrRwFrLB
DKn4VEqs44bz0WaK3IIcXUsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268257068134330166337981259915814539407474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 02:10:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 02:10:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lignana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796348978035067351992127344282577544428689318424269080045266290415140960086648822575450106049863595191124113540675190894338264972641723820705938218167207148592431689271509714459588689632888357980315454336312664456843272753640900145335332831381949185782321699113263019859704331278448505268676594012821709573413730793568131466113599495274946858187638256008430968843790248667206345700775698335794695255352877485438119365290158610331449447240741125751704377538437738763241857607043156639860336222535830041312433730321663112796489690241550294422333502530577877120582926370838771304740567924435383323531420495365888191486133821474209690671926563837312906946391606354555904443457768702217831378313060619794323127593187214319384262923122740506166784796661986528683780149624868382203269070021201141400347449733131738661719672344125757084703664766070136836100231959722280000097811714320556689522463547702735823922353818102660205930115477269906579845533668096155343186566554167110946179126265316083229348536195087661305979055832674814315496089139849722355340587164644285303868232456594491031669408063445790820801805849419474952080471279513111572320655328845881403069620348030558090558176357942015722502502811836734086439248543149422720805789003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60f9217259b2c42942960c051b7ff703835be68e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lignana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017056466658000004030047304502206d96a2b01f8bdb017affce11c6ea5eefb63a7cbb524dd0620a0336b4596b2e75022100d317066df44397c188df26ac08d5c1198f99e50e2965680bdc3641af40ec5c4e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170564666810000040300483046022100dbc764f01b019657b50c85a0373934d9f571aa0a6e263dba9be24c402205dcad02210083992ca33b57eb519c9de4e75b4055384b2303978854337df768b832dd520674
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002ffca0d9da0bfffdee74410eb9544cf3ee27ab68b00ac590db85f04d8f56e40ed9a4b53a0e513503798783822deba870b94adeefb9eed4d3c452d4c43495f5374c70937e214e66e316a17c1715b562e0cfa4884e9beb97d4323bb1b3694a1918b8176231ea4ace84786845335f0722c8fd543a501bac025e24c62c3318867288dc26c8fc0489411e6f86f1e4150e1412413fa978aa09232e7928d597afa6adb0ad824f92ee1efc235b95ed0ac1ad3c3d28434e26721c08e5fdc631e0fa0038a3ff616d827f81d30689b37fb1619c0f04ae1854bf6fe411596d6a3cd20aae0d04a581e6cc8f2ca57f09dc1ee2068cf8df14b9643fbbb656b413e1fcb1effd2a0f