giantgrow.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:d5:24:27:3d:a0:c9:66:df:a5:e2:71:e8:30:fc:cb:aa was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giantgrow.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:d5:24:27:3d:a0:c9:66:df:a5:e2:71:e8:30:fc:cb:aa
Serial Number (int): 338864268368019519018034259697670102502314
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:5b:94:3e:e1:a3:66:2e:ab:11:52:e1:f6:33:50:da:d8:83:11:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:19:1f:1d:56:88:d0:d7:06:d1:7b:24:62:8e:e7:18:f3:a4:f5:73
Fingerprint (sha256): a6:d2:3f:a9:96:cd:9d:70:c8:0d:b2:6b:e5:35:bf:3e:54:2f:63:a2:8b:d1:ab:e5:58:a3:60:34:72:d0:0d:bb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate giantgrow.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giantgrow.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giantgrow.com
www.giantgrow.com

Other certificates including the domain name giantgrow.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for giantgrow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISA+PVJCc9oMlm36Xicegw/MuqMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTcxMzIyMzVaFw0x
OTEwMTUxMzIyMzVaMBgxFjAUBgNVBAMTDWdpYW50Z3Jvdy5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC8MHIQBoS/0fmrrhj2qb6UammqPrp/7Anb
py/HYGKzaAgdVCIszyuryw7puALihI44m4rQDF5pGs0DivU6SnDaq1BhHVqY3sC0
odLhm30yD1npL1FhosF1MgY2JVj+EAb8pIrMF6NXMgvOXHejSulMtSC1i41Yj4xb
4t9T7WdCt1cLr23AVIiCx1aLwtqyzQ5clOgvn+v6B3ngcaXqvjCARDaDhor4lJiL
87pZlM04AY2jo1impeZaI0TGpLM2nbEFQuyrBaF4GXvCVn5zn+FVD0yBNzaWWIX0
KcX+FYkV8Gi8pR9ugUHFbftlvUMjP6M2UbsQYY+hTYdZt7KOQ8IpEbeWNHuDCuTs
NB9rKbx03Uf1K/zbHP028PPg31tnUoHoYhmzdISdRPPGwkEjpWLTd4/hnvR0evwO
gXVj8uqXTq/scWRDwRMNi7jBKkTqaDRLVX2GHELa/MPaPTQXoQsuOHeU/aDsbeXq
xdeo+rW7fJjZ0oKr4EPZrPriYEQyd9PGggs6PQvxPEJ0xazjuZwAFBV8eI2YziMw
GBXjuLC7CRyHSqyfJKsyhhZGIgdSk25RGCS+ooBX6NDKL2TPz9Q3la76C/WSnmZw
RZlaAoQag7nX70DElBIScg36doyH4Ky9nbtCljN/ekcCGwBVc4LjVX0YOxAL9ccX
iUHNWsuscQIDAQABo4ICdTCCAnEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTnW5Q+
4aNmLqsRUuH2M1Da2IMRSTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWdpYW50Z3Jvdy5jb22CEXd3
dy5naWFudGdyb3cuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T
AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjG
NzV55hB7zFYAAAFsAFBCIgAABAMARjBEAiA8MqcYCD1YNveGnbLouq/fxf5i3Bwj
RK2+7HG7CCG53wIgT3P5OBo39el5kKAslUHqflEkoa/+E0e1GrIi6wyiGUcAdwAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWwAUEIRAAAEAwBIMEYC
IQD3s5I3H6ZT9jQ8CqT9uzpknCFrAWNZ4jNCnPh+mT/RngIhAKZIIAR7e+dTQtic
WmC9qeVEjo+Xvg9wmdgeZjmwuqzBMA0GCSqGSIb3DQEBCwUAA4IBAQB9TcLjQ6ZY
J85O0+NGzeVQkXY/r36ZPoLHM1fiYxH3JEZ2ZMRbY9g2qC6Hfrer3+1loEFXEwyg
6c4eB7eoY8p6RN+6JkA9jR5eiRPz+DHHpV5G5E4pABjMC9c13Ng9vUilpcZWNLU1
MB5JWsKWw85xD11F2viLLq2b6aBd97f/frSjb/MMlRfO57eOTdMJbycBZ5ziCWYd
iZHUpLY/43FGkfN692wSMjEFCFvSCiQSnlxJizS4velJFXZ+TjKlSdkXh190wjDS
9J6VodUIBkriaK8t1/kskyekX6H1or/ICzkHqkimlUs6HyDJD20N1g+l1DnfBjhl
xaSG3RGHJ/EP
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338864268368019519018034259697670102502314
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 13:22:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 13:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giantgrow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767745118496205541357943432172428944679419210958504116495337759667069424222333997946683736495071379547593687637397137092729889669857098585668556499195079190286013157118865121031682456182422501717021443904178411339209590513892765244784157088796275641424677780465056375456310889898711403018631859709646071389479537238444052759736022284306012294407248680589136175034075905986692664952364960246754148399634242357175753647945666031571122750335949206505501806952577998184099439958124899524300234388087859512276285494877805302559281234289524918673531035869802131929618502805204250305507619019155846072086244943985495514543940318716400885444859208238420676133454411719847405371721293655576556000571422394603870468571586366890463549503800398278919499559136075968693229467402157835135474479591875244838122706717666348601283206093340148968453569245410930098096846297646172943745502883377301712485270264974283298405295234953935221291228576995421402063172521604962715848201434993427909988195423443480622392425621031478334026771023007960822783911436555685260949927586231254182998906793089646096572299648640231781336914140438255680305214858828945534037474122113007645390545607625302473214080186827943819730258171494170454250758597771801472656977009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e75b943ee1a3662eab1152e1f63350dad8831149
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giantgrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giantgrow.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c00504222000004030046304402203c32a718083d5836f7869db2e8baafdfc5fe62dc1c2344adbeec71bb0821b9df02204f73f9381a37f5e97990a02c9541ea7e5124a1affe1347b51ab222eb0ca21947007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c005042110000040300483046022100f7b392371fa653f6343c0aa4fdbb3a649c216b016359e233429cf87e993fd19e022100a64820047b7be75342d89c5a60bda9e5448e8f97be0f7099d81e6639b0baacc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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