www.growing.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7e:08:15:ad:d6:13:64:29:44:17:7c:17:3f:58:77:de:4c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.growing.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7e:08:15:ad:d6:13:64:29:44:17:7c:17:3f:58:77:de:4cSerial Number (int): 304223182415336984407053543895810579095116
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d2:44:50:f3:84:61:bf:f1:e1:ea:51:6e:dc:c2:94:51:cf:13:ed:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 28:76:da:5c:be:29:7a:ea:24:a2:d2:37:aa:2d:8b:d1:89:bb:2b:76
Fingerprint (sha256): b8:b3:ab:9e:50:5e:6f:39:69:5c:81:3e:b4:52:fb:c8:24:78:07:13:a0:2d:9d:c2:af:93:a2:d4:51:87:48:57
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.growing.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.growing.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.growing.org
Other certificates including the domain name growing.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.growing.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISA34IFa3WE2QpRBd8Fz9Yd95MMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDkwNjU3MjhaFw0y MDAyMDcwNjU3MjhaMBoxGDAWBgNVBAMTD3d3dy5ncm93aW5nLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMI/ijHFB+jFWmbMcXdGUjJmefiMpQni hm0eXNH/Ly1I3VHqnKeyR2HkodJUi2ehHFw9f7A1Es2/4nsEHWk5fDas0RxPHYd9 kPubkGpidu2p4XMcBi+yeDWH9dIopNwmt2lv790pjlzMW/SIHPRTGXu1wW+aFaQH rUjm3f+B/0nRp0ADZGD+LGRyEWeflsNETky9zkU8vjXPLHUNZsCAfl4Wi63Oz974 1RX3StyuoInogP+/LsQvMLPTQn6cKNOSPDeKTKKYjQGz+iR2dmetB9LhkmPUHwWP Enkzku4s7mVOvYq+XcevfKej1+GkzLYuw4WXGHnx7b78TfG+h5Dq2YQuc0BG1rPH mI6UlXCxzHyJ3VD7HVZlAmiXKpdKv+J+uWnlzLFqoz1GN6R/0wsX9eN7P9B9pMqv NuR0NCp4imQkU+tKf5A5Wb/NzXmaHVdcTOPgHb9Tc0VBh+QVvlNkpO6hfTrtizMB 02F91kVK5IhxcxZDMeUIYFSl3F5z4ORuhgPIbcS9yy64ixxSwFmgkbB+R3vNg88l 2wSzwwgDBUsHyNrbou/Jw5CT8wR6X6CkL7O2HImVjoZ7U5vSJYQQUGKbImjduZVC GR9qQPjNfr9q1BYmtjmyRPgzG25iaOGDBkMJGiZ7iu96g+4iaf765PD3JbXKe2Kc FUKlyKuEClIXAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNJE UPOEYb/x4epRbtzClFHPE+21MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3Lmdyb3dpbmcub3Jn MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFuTyr+ 1AAABAMASDBGAiEA8A0tj/FCtDAOCAezpeDZsfYPUzx42JMA7oxseAGPCckCIQD/ shO0oDHenj75hl4R9mW7OSxt5Y7Emvl6/qHb0gjY4wB2AF6nc/nfVsDntTZIfdBJ 4DJ6kZoMhKESEoQYdZaBcUVYAAABbk8q/ucAAAQDAEcwRQIhALBfWeddXQsFH2y1 1vboiXxVhe7LerjO1gZWEQ3O+wGzAiAx/+/8MNQQ9Jlw8ZjUCK1yIcufxAVr7kNx jOu68KR10zANBgkqhkiG9w0BAQsFAAOCAQEAZWQgz8d5lXUUFC2A1nCbyspn52qe BTlancDK96sNiynke6hQSBWLNVfzGpSdK5Ul2fWyoT4GWmpGPfu35FuXwHaAd8Qp feITXfX8nbbL4oZLQXEWQeYOKmwOU+o0eEHu53OgG0vJdZ65oej4WvAv7p6eDZN5 nTxEjUjlzpbf99wJQlZOkP/1ZZWlKEHI41Ei1PtzInyV2S0Xu8hmYH6bzgi6Ire4 Ce/vd/W1RuFU9Js52VBRJU8eHUK2Gh0mR2Rp58b3bZbZHKWeHGAUBEtmFJnQ+yQc ZjRAms5Qqt8UqRWrkB4A/gyiQYxTPsA6fJs2hc30CF1Ds8N/YJV87wKmuw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwj+KMcUH6MVaZsxxd0ZS MmZ5+IylCeKGbR5c0f8vLUjdUeqcp7JHYeSh0lSLZ6EcXD1/sDUSzb/iewQdaTl8 NqzRHE8dh32Q+5uQamJ27anhcxwGL7J4NYf10iik3Ca3aW/v3SmOXMxb9Igc9FMZ e7XBb5oVpAetSObd/4H/SdGnQANkYP4sZHIRZ5+Ww0ROTL3ORTy+Nc8sdQ1mwIB+ XhaLrc7P3vjVFfdK3K6gieiA/78uxC8ws9NCfpwo05I8N4pMopiNAbP6JHZ2Z60H 0uGSY9QfBY8SeTOS7izuZU69ir5dx698p6PX4aTMti7DhZcYefHtvvxN8b6HkOrZ hC5zQEbWs8eYjpSVcLHMfIndUPsdVmUCaJcql0q/4n65aeXMsWqjPUY3pH/TCxf1 43s/0H2kyq825HQ0KniKZCRT60p/kDlZv83NeZodV1xM4+Adv1NzRUGH5BW+U2Sk 7qF9Ou2LMwHTYX3WRUrkiHFzFkMx5QhgVKXcXnPg5G6GA8htxL3LLriLHFLAWaCR sH5He82DzyXbBLPDCAMFSwfI2tui78nDkJPzBHpfoKQvs7YciZWOhntTm9IlhBBQ YpsiaN25lUIZH2pA+M1+v2rUFia2ObJE+DMbbmJo4YMGQwkaJnuK73qD7iJp/vrk 8Pcltcp7YpwVQqXIq4QKUhcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 304223182415336984407053543895810579095116 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 06:57:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 06:57:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.growing.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 792463526764646171654772775165466811682835592113207191469139014512941079231157078394060579063043813260127265089539372907180781171620702617551951560786297958563943288453201506561330936163318059780007683044280491483273967318043279138050287243093319273227564529820759426777131064722147390105450346914484841551238219289185872377945732049798060920461074255863794810148457166695556340928016837710198113550393079346599344001625204006162731011701024052427296815429329441563679719379666776399092518390141237225855957647534585059816483891557062048926263899781735926999729461549594234453525217407865054912831472102283888887462960062788433630470597647585512012067607295273936081851326624671938414532355172939651471522247468749175502407864202019051506034180570690736961476080733003082731298078208386241118692013912418120717187083684524552941299918653339054455446158395341179337157928871366693357306998070202108639702964728208730363720786203514238172823774729396184541259858097705340172908685491335470646363839907026164961986433145202879067683413358810771255546374375591898653110397219480338723700240417110133079230234443810799038038126789573756313638001210043817452094209183781837163881377889026455768438281207788687446019383410869818496811422231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d24450f38461bff1e1ea516edcc29451cf13edb5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.growing.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4f2afed40000040300483046022100f00d2d8ff142b4300e0807b3a5e0d9b1f60f533c78d89300ee8c6c78018f09c9022100ffb213b4a031de9e3ef9865e11f665bb392c6de58ec49af97afea1dbd208d8e30076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4f2afee70000040300473045022100b05f59e75d5d0b051f6cb5d6f6e8897c5585eecb7ab8ced60656110dcefb01b3022031ffeffc30d410f49970f198d408ad7221cb9fc4056bee43718cebbaf0a475d3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00656420cfc779957514142d80d6709bcaca67e76a9e05395a9dc0caf7ab0d8b29e47ba85048158b3557f31a949d2b9525d9f5b2a13e065a6a463dfbb7e45b97c0768077c4297de2135df5fc9db6cbe2864b41711641e60e2a6c0e53ea347841eee773a01b4bc9759eb9a1e8f85af02fee9e9e0d93799d3c448d48e5ce96dff7dc0942564e90fff56595a52841c8e35122d4fb73227c95d92d17bbc866607e9bce08ba22b7b809efef77f5b546e154f49b39d95051254f1e1d42b61a1d26476469e7c6f76d96d91ca59e1c6014044b661499d0fb241c6634409ace50aadf14a915ab901e00fe0ca2418c533ec03a7c9b3685cdf4085d43b3c37f60957cef02a6bb