lignana.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:eb:73:d8:8f:34:36:8f:26:8a:76:b2:dc:f7:4f:27:aa:b3 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=lignana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:eb:73:d8:8f:34:36:8f:26:8a:76:b2:dc:f7:4f:27:aa:b3Serial Number (int): 341457199681859310723773735531022717004467
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 1b:d1:fb:b9:36:3e:9e:0b:00:08:c1:e8:30:08:ee:b8:63:8d:5f:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 4d:eb:12:03:a6:3e:b3:f6:d9:5f:92:7d:b0:e5:21:2f:f1:70:5e:db
Fingerprint (sha256): c0:d5:70:bb:bb:ee:79:2b:1b:d5:1f:00:d1:96:e9:cb:3f:95:da:21:2b:01:bf:74:96:8b:9f:59:02:85:c5:3f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate lignana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for lignana.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
lignana.com
Other certificates including the domain name lignana.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for lignana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISA+tz2I80No8minay3PdPJ6qzMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDkxNjExNDBaFw0y MDAxMDcxNjExNDBaMBYxFDASBgNVBAMTC2xpZ25hbmEuY29tMIICIjANBgkqhkiG 9w0BAQEFAAOCAg8AMIICCgKCAgEAs1GBpB3PSPiJ8pJztNIT9SDKfXYydhUPXdfm QUaVfwF5aTQas0QOGyuLU0IUjvL6wI5a/OrNm+ibTFeW4GC1MCjKlonmDcGJtJGs 682iZ3SxUKmXcyDQ2C37nzrlebnWi5pfyUFCIlA88WjG1tuUdvu5zaiPfhyBftAJ AG+7tUNbW/DzMAi0jRZyq6kAE+rXt6PDWSG2sGjMYA49g3kjGmWOKNQBOrBpnxeB x4PF5EMAS9sXVvAl3BTHjMSkRDDZ0oOIU/IuXCwj67atGVIff6ZVOGYIAURg7vJW rb3UBRcdj6868DnsZu/DGuaClzFhfMB4rODWbFjP6jA9eyYHe8D3+M5rHbrKz8GI HNZVqlH+s6DwP81OrJQtufmiG3JXgbmvuOBuXVJ90CbZtC3fuJHN/e0Lc8kpfMS/ q/ZLi5u350O+zISu2eEW+d48DdRaj2afVePzGvOEVEHF4v981VV5UyTENwddooZZ EZwgg8WprgKcsn/mu8bQUzFDXKIszSFYmXXXNtA1sEpCEbjJW+DH6qFONm+naPL1 jnguDNFEvEBmd5rWN9Fk5tgDdQUgctdJALHo2yf5yrgHrnqEEnePmojfDoHmkhi4 T0AMY1hLzL8JEr5xcisEBCqOMYCc8HWpzaszHCVRmSduArbZ9hbw678vMMX7tPoo h1pnidMCAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUG9H7uTY+ ngsACMHoMAjuuGONX7gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtsaWduYW5hLmNvbTBMBgNVHSAE RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1 APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbbGBPeoAAAQDAEYw RAIgcYrfxSHUAmaEr+fku4hDrOXgdbfo40pIOrx2qtDpOLsCIDDpj7SpxExM+gqv CZzrJnq2YCC0YCYTV930vmRcxECwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFtsYE94AAABAMARzBFAiEA9bbGhmNrmH9FgPPZ7poKAzXNOFqb fcRcoLZYjqab7t8CIChLpyd6x/vrTVJ2BhDub/aCabw4YrksPJ1cYGNzKb+QMA0G CSqGSIb3DQEBCwUAA4IBAQA02wvwF3p4vzYAzA2+BMtwIvvifDU5FISoRzvWSM4d 4foEeC80P1doxeiybedeWhhPrefih0M+AQTI7GScEhWiqvAS/fdVkfbGSCFVZp/T FtE4o7OOZY6Iq6KKxOsq7Ci2KfAfTQPt4QJgR2of8q6/RVoB5ahppKswy6najjOA cF4+2RGA2hL9fN9rQbcddf5Y/lobDA//bU4Ogd8S7XuRKjcnGpK39AB/lF76iLpg ICy178K5gRPWQaBDa1AGRFYKflPmZH+fhxIQtUWAFdxaooID7LQOC2H2Np8A7YTp wD2X9v9neZI/NUo0R2a5t3lOONh5wx02rNRZur3KN3hz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs1GBpB3PSPiJ8pJztNIT 9SDKfXYydhUPXdfmQUaVfwF5aTQas0QOGyuLU0IUjvL6wI5a/OrNm+ibTFeW4GC1 MCjKlonmDcGJtJGs682iZ3SxUKmXcyDQ2C37nzrlebnWi5pfyUFCIlA88WjG1tuU dvu5zaiPfhyBftAJAG+7tUNbW/DzMAi0jRZyq6kAE+rXt6PDWSG2sGjMYA49g3kj GmWOKNQBOrBpnxeBx4PF5EMAS9sXVvAl3BTHjMSkRDDZ0oOIU/IuXCwj67atGVIf f6ZVOGYIAURg7vJWrb3UBRcdj6868DnsZu/DGuaClzFhfMB4rODWbFjP6jA9eyYH e8D3+M5rHbrKz8GIHNZVqlH+s6DwP81OrJQtufmiG3JXgbmvuOBuXVJ90CbZtC3f uJHN/e0Lc8kpfMS/q/ZLi5u350O+zISu2eEW+d48DdRaj2afVePzGvOEVEHF4v98 1VV5UyTENwddooZZEZwgg8WprgKcsn/mu8bQUzFDXKIszSFYmXXXNtA1sEpCEbjJ W+DH6qFONm+naPL1jnguDNFEvEBmd5rWN9Fk5tgDdQUgctdJALHo2yf5yrgHrnqE EnePmojfDoHmkhi4T0AMY1hLzL8JEr5xcisEBCqOMYCc8HWpzaszHCVRmSduArbZ 9hbw678vMMX7tPooh1pnidMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341457199681859310723773735531022717004467 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 16:11:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 16:11:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lignana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731555183269244209769983336986429413950197683340259022343965843715045816901133009723121527317969983304063282077261802933550092732966521158802069482023804501436333041678562965518161524578819015956408012910014365899001147049734936518890896361394328411829919470064214890523595458316335735105398399993012071753698223903777464002793574144446617408617897704935377515019389075639097920853247274640311537060435295164935363886149839687283044571626482942150795094099199833991597857996912542628402377850073632374730259895646979848711133618972967799819107632862961426222658052404875212320293594608794450469450985134613352106861784845607979122809878731214959776139539212152619541818753300658308466883120798699869881133657374493920907298597938950818387714707540907085616238212777135105077834196634689588781266618271518297195157324407118246036202965837801624828640574045887322813296203729655233055803485719840838933241283905942236619578876032649062148195887985586864626608379018219896504317457279005095444465574173814933594494665399588709001815841650752276970734624858753893952847200113743002526199807863998467840855219713387953424164126999458885616858768940858492616753688245028238057227275949528501856565492182465834964813364207888522192718629331 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1bd1fbb9363e9e0b0008c1e83008eeb8638d5fb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lignana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016db1813dea00000403004630440220718adfc521d4026684afe7e4bb8843ace5e075b7e8e34a483abc76aad0e938bb022030e98fb4a9c44c4cfa0aaf099ceb267ab66020b460261357ddf4be645cc440b0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db1813de00000040300473045022100f5b6c686636b987f4580f3d9ee9a0a0335cd385a9b7dc45ca0b6588ea69beedf0220284ba7277ac7fbeb4d52760610ee6ff68269bc3862b92c3c9d5c60637329bf90 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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