www.growing.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:08:15:ad:d6:13:64:29:44:17:7c:17:3f:58:77:de:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.growing.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:08:15:ad:d6:13:64:29:44:17:7c:17:3f:58:77:de:4c
Serial Number (int): 304223182415336984407053543895810579095116
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:44:50:f3:84:61:bf:f1:e1:ea:51:6e:dc:c2:94:51:cf:13:ed:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 28:76:da:5c:be:29:7a:ea:24:a2:d2:37:aa:2d:8b:d1:89:bb:2b:76
Fingerprint (sha256): b8:b3:ab:9e:50:5e:6f:39:69:5c:81:3e:b4:52:fb:c8:24:78:07:13:a0:2d:9d:c2:af:93:a2:d4:51:87:48:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.growing.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.growing.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.growing.org

Other certificates including the domain name growing.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.growing.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304223182415336984407053543895810579095116
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 06:57:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 06:57:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.growing.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792463526764646171654772775165466811682835592113207191469139014512941079231157078394060579063043813260127265089539372907180781171620702617551951560786297958563943288453201506561330936163318059780007683044280491483273967318043279138050287243093319273227564529820759426777131064722147390105450346914484841551238219289185872377945732049798060920461074255863794810148457166695556340928016837710198113550393079346599344001625204006162731011701024052427296815429329441563679719379666776399092518390141237225855957647534585059816483891557062048926263899781735926999729461549594234453525217407865054912831472102283888887462960062788433630470597647585512012067607295273936081851326624671938414532355172939651471522247468749175502407864202019051506034180570690736961476080733003082731298078208386241118692013912418120717187083684524552941299918653339054455446158395341179337157928871366693357306998070202108639702964728208730363720786203514238172823774729396184541259858097705340172908685491335470646363839907026164961986433145202879067683413358810771255546374375591898653110397219480338723700240417110133079230234443810799038038126789573756313638001210043817452094209183781837163881377889026455768438281207788687446019383410869818496811422231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d24450f38461bff1e1ea516edcc29451cf13edb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growing.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4f2afed40000040300483046022100f00d2d8ff142b4300e0807b3a5e0d9b1f60f533c78d89300ee8c6c78018f09c9022100ffb213b4a031de9e3ef9865e11f665bb392c6de58ec49af97afea1dbd208d8e30076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4f2afee70000040300473045022100b05f59e75d5d0b051f6cb5d6f6e8897c5585eecb7ab8ced60656110dcefb01b3022031ffeffc30d410f49970f198d408ad7221cb9fc4056bee43718cebbaf0a475d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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