lubrishop.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2d:a9:77:0c:25:55:be:b3:5f:34:30:57:7d:b2:32:82:f1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lubrishop.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:a9:77:0c:25:55:be:b3:5f:34:30:57:7d:b2:32:82:f1
Serial Number (int): 363987107899443927895004162278078842831601
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 70:81:2b:ce:d0:ea:fe:5e:54:57:e0:0f:f9:16:aa:89:0c:ca:a5:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 82:71:3b:77:3d:39:24:b3:88:3e:e6:0f:f9:fc:d7:d7:c1:4d:40:87
Fingerprint (sha256): a5:a0:17:41:05:90:2b:e1:99:b5:04:34:26:62:a2:e9:d7:5e:b2:39:58:e3:ed:ce:05:ab:d5:20:88:b3:a4:e9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lubrishop.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lubrishop.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lubrishop.com

Other certificates including the domain name lubrishop.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lubrishop.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363987107899443927895004162278078842831601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 15:19:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 15:19:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lubrishop.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 855220434659779174117811683510597674759596606086491493313737285067234062718804803189588816648271932387153685814462482112695343157253695117921139253125885004564209792950371182512197775886923828643403714751255637821781985857242650669667947161230531708014041593107821874978870691226066536683486753542438945867136997468034399651625189281006883373647166725703417056756684308236687002228226004444566792570507197400271946125453671137967631614738851348779021985892080605828739461941514938383344063331732635194281398165590170173449893880485380494474181270465182436216486264124583453657743758104060056867948083436348011225924139982690937816613045903620477789359813385435709907554072569640129706125716343708382816061151767767867644185144124561550236867632458767097403532095908998947502512340290903375015068892071887962353368473845687981078093125686234410068678812816296779560032585167367040704194985031312625102035977450215585896185520924491721070650523670033480341824113707519877379893581613208119455899152979146996942452125367971585860252632276332713329320266403563223219728104397877723149182574051811881987715257989443754598850428195291840765369348406496893139845344538603381066369637334173802291734849610569826047784850107998940325888223817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							70812bced0eafe5e5457e00ff916aa890ccaa549
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lubrishop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017072d843ae0000040300473045022041a75b99b9504c562d2164371659c68af110f83b9fd4ebafc44e565b3a37fd01022100ea11439bde2cc72899d4f2e8a5fb19131015e8d7d424a438e1ddf5b16dc2eedb00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017072d843d9000004030046304402201ee49a526f2359b7288fe6188a54a22ab0bcf38f0999a05035de6aaff80dc3a5022012e1e37ba8b6945fd58afae2bb59f22be6e9144108327aea201b6bf2753fbce4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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