lignana.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:14:56:30:08:06:1e:0b:dc:12:dc:a5:6c:e7:dd:f4:b0:72 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lignana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:14:56:30:08:06:1e:0b:dc:12:dc:a5:6c:e7:dd:f4:b0:72Serial Number (int): 268257068134330166337981259915814539407474
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 60:f9:21:72:59:b2:c4:29:42:96:0c:05:1b:7f:f7:03:83:5b:e6:8e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6a:57:86:a2:ce:ff:16:ca:45:f9:2e:ed:91:4f:85:59:59:77:cf:0f
Fingerprint (sha256): a0:1f:01:ad:67:73:23:c6:b2:fe:c5:92:9e:1e:d0:88:84:e0:d4:2b:d0:2f:5c:e8:27:d4:ff:4b:93:d9:c3:8d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lignana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lignana.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lignana.com
Other certificates including the domain name lignana.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for lignana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAxRWMAgGHgvcEtylbOfd9LByMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTgwMjEwMTlaFw0y MDA1MTgwMjEwMTlaMBYxFDASBgNVBAMTC2xpZ25hbmEuY29tMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAwzNapyHx82K0ENn3T+dNAZn+e/W5KTkpfatO SyASgyz0Nh2QVhPMA17xwVSAnIW+8Y5JGWV1py+1Ah0GUYuIf5iBhv1zsU4Uh8g7 TSOdqcnPc6mmMK0O2qL3Bv+stPGswAyxmbL0q1t+v3yHZeLzJYk3un8cK2+5k2MZ +jnCwMs8umgjs5ALq7x/F57ScimL+A1rkvSd9+6HoaIeZnL730M+6feMhn6V4O9I DM0Y+0WHZbKajAm1UwYsuprtK7eEP5hRK6gYXdtIid0YkpzpJKh1zTtPYZlyBNz2 IchAjRyz6MDAjK9I21w36YGXVm9MX058X+GNzEB1Y9RPnThuIlkUcxWhwIsy4raW bxNkyNI0Mq1ak0UHjiRT3Tf9K2pdRCr39JLuzhJpZMG0tU7EJLqgQZrtN1T6s4kK NWQ3H1VdS3Y+43+E4XC2HouzAQZSQeoU6D2tb3Z0h/QzYA8BBP3wqUfa4qH7q51x cw2GCVyB0ok13MYiGTJ3rU4mdsXNcgXWZONbBSdprxRDtHbfUKaRctPER1W+Ktjo 3nwERTl+UE/kHkHgv+sx3aCJDEp4PXl9hWjCrtTXsCgX/fDqL9KNyCELvTNPo1v7 n2vuxCQ8Pxmx4rMdRnb0yelhPIV3mOItIl7W7IDwfrRwFrLBDKn4VEqs44bz0WaK 3IIcXUsCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUYPkhclmy xClClgwFG3/3A4Nb5o4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtsaWduYW5hLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2 AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcFZGZlgAAAQDAEcw RQIgbZaisB+L2wF6/84Rxupe77Y6fLtSTdBiCgM2tFlrLnUCIQDTFwZt9EOXwYjf JqwI1cEZj5nlDillaAvcNkGvQOxcTgB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq 7rxhOhpp06IcAAABcFZGZoEAAAQDAEgwRgIhANvHZPAbAZZXtQyFoDc5NNn1caoK biY9upviTEAiBdytAiEAg5ksoztX61GcneTnW0BVOEsjA5eIVDN992i4Mt1SBnQw DQYJKoZIhvcNAQELBQADggEBAC/8oNnaC//97nRBDrlUTPPuJ6tosArFkNuF8E2P VuQO2aS1Og5RNQN5h4OCLeuocLlK3u+57tTTxFLUxDSV9TdMcJN+IU5m4xahfBcV tWLgz6SITpvrl9QyO7GzaUoZGLgXYjHqSs6EeGhFM18HIsj9VDpQG6wCXiTGLDMY hnKI3CbI/ASJQR5vhvHkFQ4UEkE/qXiqCSMueSjVl6+mrbCtgk+S7h78I1uV7QrB rTw9KENOJnIcCOX9xjHg+gA4o/9hbYJ/gdMGibN/sWGcDwSuGFS/b+QRWW1qPNIK rg0EpYHmzI8spX8J3B7iBoz43xS5ZD+7tla0E+H8se/9Kg8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwzNapyHx82K0ENn3T+dN AZn+e/W5KTkpfatOSyASgyz0Nh2QVhPMA17xwVSAnIW+8Y5JGWV1py+1Ah0GUYuI f5iBhv1zsU4Uh8g7TSOdqcnPc6mmMK0O2qL3Bv+stPGswAyxmbL0q1t+v3yHZeLz JYk3un8cK2+5k2MZ+jnCwMs8umgjs5ALq7x/F57ScimL+A1rkvSd9+6HoaIeZnL7 30M+6feMhn6V4O9IDM0Y+0WHZbKajAm1UwYsuprtK7eEP5hRK6gYXdtIid0Ykpzp JKh1zTtPYZlyBNz2IchAjRyz6MDAjK9I21w36YGXVm9MX058X+GNzEB1Y9RPnThu IlkUcxWhwIsy4raWbxNkyNI0Mq1ak0UHjiRT3Tf9K2pdRCr39JLuzhJpZMG0tU7E JLqgQZrtN1T6s4kKNWQ3H1VdS3Y+43+E4XC2HouzAQZSQeoU6D2tb3Z0h/QzYA8B BP3wqUfa4qH7q51xcw2GCVyB0ok13MYiGTJ3rU4mdsXNcgXWZONbBSdprxRDtHbf UKaRctPER1W+Ktjo3nwERTl+UE/kHkHgv+sx3aCJDEp4PXl9hWjCrtTXsCgX/fDq L9KNyCELvTNPo1v7n2vuxCQ8Pxmx4rMdRnb0yelhPIV3mOItIl7W7IDwfrRwFrLB DKn4VEqs44bz0WaK3IIcXUsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 268257068134330166337981259915814539407474 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 02:10:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 02:10:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lignana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796348978035067351992127344282577544428689318424269080045266290415140960086648822575450106049863595191124113540675190894338264972641723820705938218167207148592431689271509714459588689632888357980315454336312664456843272753640900145335332831381949185782321699113263019859704331278448505268676594012821709573413730793568131466113599495274946858187638256008430968843790248667206345700775698335794695255352877485438119365290158610331449447240741125751704377538437738763241857607043156639860336222535830041312433730321663112796489690241550294422333502530577877120582926370838771304740567924435383323531420495365888191486133821474209690671926563837312906946391606354555904443457768702217831378313060619794323127593187214319384262923122740506166784796661986528683780149624868382203269070021201141400347449733131738661719672344125757084703664766070136836100231959722280000097811714320556689522463547702735823922353818102660205930115477269906579845533668096155343186566554167110946179126265316083229348536195087661305979055832674814315496089139849722355340587164644285303868232456594491031669408063445790820801805849419474952080471279513111572320655328845881403069620348030558090558176357942015722502502811836734086439248543149422720805789003 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 60f9217259b2c42942960c051b7ff703835be68e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lignana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017056466658000004030047304502206d96a2b01f8bdb017affce11c6ea5eefb63a7cbb524dd0620a0336b4596b2e75022100d317066df44397c188df26ac08d5c1198f99e50e2965680bdc3641af40ec5c4e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170564666810000040300483046022100dbc764f01b019657b50c85a0373934d9f571aa0a6e263dba9be24c402205dcad02210083992ca33b57eb519c9de4e75b4055384b2303978854337df768b832dd520674 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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