www.lzma2.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:c7:3d:b8:86:33:a9:b2:ba:32:27:95:46:3e:0a:01:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lzma2.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:c7:3d:b8:86:33:a9:b2:ba:32:27:95:46:3e:0a:01:ee
Serial Number (int): 327616473821808300471758695399159239410158
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:0b:ce:79:98:9e:2d:4e:a5:ba:0d:99:b8:d3:4d:07:2f:71:4a:6d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:29:fb:d5:af:8a:28:e5:b0:70:e4:67:7e:3a:ac:92:36:1d:73:16
Fingerprint (sha256): b6:19:07:8f:ea:dc:12:0e:47:60:c0:1f:aa:f3:17:c8:ea:11:32:bb:6d:e8:a4:f3:5f:79:b6:ce:57:ae:6d:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lzma2.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lzma2.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lzma2.com

Other certificates including the domain name lzma2.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lzma2.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA8LHPbiGM6myujInlUY+CgHuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTAwODI5NDFaFw0y
MDAzMDkwODI5NDFaMBgxFjAUBgNVBAMTDXd3dy5sem1hMi5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCv0JwzAVk1dsIzl4RgMZDpj11TwoBOUW0j
YnoLDSfAJ1mxwE8aEF5y2SAqRJZsnEo/eGp5owSFE37OSSwRmMeMYBOpUiZ/4n16
7rrM9tafZrKxdyyE4s0Q7jmzYaNaubtLimY16AjZmHt3J2XaWk71iA0qlrQWJ769
P+PHdEny913gtOr/jgg8cAjqj5zk0Shf0GQ4kS6so/S0RUchaAdhiEPKfhzCUytO
5VwlbWqG/sVjpOq17ilUcNB4IOutmC+tPhyODdxpXQlRyFVqM8e3iMRNh4nJajVI
NNMIe83aQd+Ju2sCFiji00SOzLcup5b1zN32Wja3JO5hZgsD5kU06zqX92PcVQEU
aWmPiyy8giyln2RIrZ62Rm5CILpCCXxFK9UoMzkqI7dF6NwF8X2gTM1tDTcK3oDI
eiVd7D7sia9zyhcOpIHgUyw6O7pIEzN6fGL/GqRBRkrdXsCC2UnSsZnw83+bJj6s
9Pu+weNHzdptSBAdrTS9hLoQdruWRRCM0YM3cZiXatc5fes9tjH8pgg+k0aaZ2RS
BxzN0rdBG0BkFDKUP8fMPxcg/tdED1u1p0OkzsZRTnuGXnv1nhWIN7ecNmyZ3geM
1ACNDySRJAdr8/JaIjeb9KMQXbUswIbJeN+lMLtX1X8YxD2tmqjJuClsUrfhda2c
5OO2D2KNzQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQNC855
mJ4tTqW6DZm4000HL3FKbTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5sem1hMi5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW7vJJAxAAAE
AwBHMEUCIB3rvu+vPn1q359VpOxvOz5u850IhnziG6AOrHpzi10ZAiEA/jXxdCo0
Ur1M0wVYTOigNNrtAtGxd0V8UpAUpziFgWIAdQAHt1wb5X1o//Gwxh0jFce65ld8
V5S3au68YToaadOiHAAAAW7vJJBWAAAEAwBGMEQCIFOCk6adptE2NVWp8s+iJPb1
FTjKrDR+iVHF+vgBy1lEAiA/oEgZWPfSEqK+sUlzwmfhGM79X8wDAIaz438sR37z
/jANBgkqhkiG9w0BAQsFAAOCAQEAdd/ytXAqTeML5w7lKzWu95TmCdhS33y8l8KG
0YVrU+EHPJLJaLp1UdiPhUJ59CK9CVxheXMmpcYdxEGuKzg3lX1P5a+K90XYxul2
YZPm+f/13hLnVoUo8eCeJHs2SipvhKF57+Fzx3DuIcP32gTWVIuwsBmT0o8wfOyi
ydHfQ4mgEHUdR1en+F+2vwuaq5dWc4h1uytJbyH/FZgn48/w7ZjO0P7KjHfQo4Ag
O/tig2crpkiZgiRrEv8rGmZEjkCUk4MZu9ICJFkhUWXYxEbWjgNnE+gE1OeOYT+3
vgVvUsHUoOFWSx8oU+fUgY5zfEhobehpN7CDb3baIyMHDu/MEg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr9CcMwFZNXbCM5eEYDGQ
6Y9dU8KATlFtI2J6Cw0nwCdZscBPGhBectkgKkSWbJxKP3hqeaMEhRN+zkksEZjH
jGATqVImf+J9eu66zPbWn2aysXcshOLNEO45s2GjWrm7S4pmNegI2Zh7dydl2lpO
9YgNKpa0Fie+vT/jx3RJ8vdd4LTq/44IPHAI6o+c5NEoX9BkOJEurKP0tEVHIWgH
YYhDyn4cwlMrTuVcJW1qhv7FY6Tqte4pVHDQeCDrrZgvrT4cjg3caV0JUchVajPH
t4jETYeJyWo1SDTTCHvN2kHfibtrAhYo4tNEjsy3LqeW9czd9lo2tyTuYWYLA+ZF
NOs6l/dj3FUBFGlpj4ssvIIspZ9kSK2etkZuQiC6Qgl8RSvVKDM5KiO3RejcBfF9
oEzNbQ03Ct6AyHolXew+7Imvc8oXDqSB4FMsOju6SBMzenxi/xqkQUZK3V7AgtlJ
0rGZ8PN/myY+rPT7vsHjR83abUgQHa00vYS6EHa7lkUQjNGDN3GYl2rXOX3rPbYx
/KYIPpNGmmdkUgcczdK3QRtAZBQylD/HzD8XIP7XRA9btadDpM7GUU57hl579Z4V
iDe3nDZsmd4HjNQAjQ8kkSQHa/PyWiI3m/SjEF21LMCGyXjfpTC7V9V/GMQ9rZqo
ybgpbFK34XWtnOTjtg9ijc0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327616473821808300471758695399159239410158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-10 08:29:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 08:29:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lzma2.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 717262146178334255968746564454669622655944787106001014200299075181845649929987090322258820119644445864194445792082589848565436869162378818075288211572881623420060858650527407975397474630664025379966186959823902352712343475871123599801298269958571320975469632043994652406103976743369306891305666326361003770353951141014748264000260957248003741617799386994173439394000397958111149046438644900548042987084078691207145447920591402413629100935879190453835363852799474197055651459253188860577869350504601666888241037118200415775739129725525456157566129610818048524261088389089434308819448376967594598645502211749911964862011297630816180010459607652798749700562427164245601964487478406663426529568666762785720670234554770230046357242008358175157876094257678191313713787923937946942697558925457852896533653627662851941827220890194217699513158377063763896501235353520363197408773860006461980800516776665300629302372657435097925701058350364339286767011609889993491823534742057797063585943709815251241510982580956814796006351683872623565746227942935303813536794964544086983641193335567211860262886795319073299772904681578987777738674355222392897729602452998940851508848615795089263764969064458951097975215748232527240626270414872895433451146701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d0bce79989e2d4ea5ba0d99b8d34d072f714a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lzma2.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eef249031000004030047304502201debbeefaf3e7d6adf9f55a4ec6f3b3e6ef39d08867ce21ba00eac7a738b5d19022100fe35f1742a3452bd4cd305584ce8a034daed02d1b177457c529014a73885816200750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eef24905600000403004630440220538293a69da6d1363555a9f2cfa224f6f51538caac347e8951c5faf801cb594402203fa0481958f7d212a2beb14973c267e118cefd5fcc030086b3e37f2c477ef3fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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