lignana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:73:d8:8f:34:36:8f:26:8a:76:b2:dc:f7:4f:27:aa:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lignana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:73:d8:8f:34:36:8f:26:8a:76:b2:dc:f7:4f:27:aa:b3
Serial Number (int): 341457199681859310723773735531022717004467
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1b:d1:fb:b9:36:3e:9e:0b:00:08:c1:e8:30:08:ee:b8:63:8d:5f:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:eb:12:03:a6:3e:b3:f6:d9:5f:92:7d:b0:e5:21:2f:f1:70:5e:db
Fingerprint (sha256): c0:d5:70:bb:bb:ee:79:2b:1b:d5:1f:00:d1:96:e9:cb:3f:95:da:21:2b:01:bf:74:96:8b:9f:59:02:85:c5:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lignana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lignana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lignana.com

Other certificates including the domain name lignana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lignana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA+tz2I80No8minay3PdPJ6qzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMDkxNjExNDBaFw0y
MDAxMDcxNjExNDBaMBYxFDASBgNVBAMTC2xpZ25hbmEuY29tMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAs1GBpB3PSPiJ8pJztNIT9SDKfXYydhUPXdfm
QUaVfwF5aTQas0QOGyuLU0IUjvL6wI5a/OrNm+ibTFeW4GC1MCjKlonmDcGJtJGs
682iZ3SxUKmXcyDQ2C37nzrlebnWi5pfyUFCIlA88WjG1tuUdvu5zaiPfhyBftAJ
AG+7tUNbW/DzMAi0jRZyq6kAE+rXt6PDWSG2sGjMYA49g3kjGmWOKNQBOrBpnxeB
x4PF5EMAS9sXVvAl3BTHjMSkRDDZ0oOIU/IuXCwj67atGVIff6ZVOGYIAURg7vJW
rb3UBRcdj6868DnsZu/DGuaClzFhfMB4rODWbFjP6jA9eyYHe8D3+M5rHbrKz8GI
HNZVqlH+s6DwP81OrJQtufmiG3JXgbmvuOBuXVJ90CbZtC3fuJHN/e0Lc8kpfMS/
q/ZLi5u350O+zISu2eEW+d48DdRaj2afVePzGvOEVEHF4v981VV5UyTENwddooZZ
EZwgg8WprgKcsn/mu8bQUzFDXKIszSFYmXXXNtA1sEpCEbjJW+DH6qFONm+naPL1
jnguDNFEvEBmd5rWN9Fk5tgDdQUgctdJALHo2yf5yrgHrnqEEnePmojfDoHmkhi4
T0AMY1hLzL8JEr5xcisEBCqOMYCc8HWpzaszHCVRmSduArbZ9hbw678vMMX7tPoo
h1pnidMCAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUG9H7uTY+
ngsACMHoMAjuuGONX7gwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtsaWduYW5hLmNvbTBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1
APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbbGBPeoAAAQDAEYw
RAIgcYrfxSHUAmaEr+fku4hDrOXgdbfo40pIOrx2qtDpOLsCIDDpj7SpxExM+gqv
CZzrJnq2YCC0YCYTV930vmRcxECwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn
sklTLe+LkF4AAAFtsYE94AAABAMARzBFAiEA9bbGhmNrmH9FgPPZ7poKAzXNOFqb
fcRcoLZYjqab7t8CIChLpyd6x/vrTVJ2BhDub/aCabw4YrksPJ1cYGNzKb+QMA0G
CSqGSIb3DQEBCwUAA4IBAQA02wvwF3p4vzYAzA2+BMtwIvvifDU5FISoRzvWSM4d
4foEeC80P1doxeiybedeWhhPrefih0M+AQTI7GScEhWiqvAS/fdVkfbGSCFVZp/T
FtE4o7OOZY6Iq6KKxOsq7Ci2KfAfTQPt4QJgR2of8q6/RVoB5ahppKswy6najjOA
cF4+2RGA2hL9fN9rQbcddf5Y/lobDA//bU4Ogd8S7XuRKjcnGpK39AB/lF76iLpg
ICy178K5gRPWQaBDa1AGRFYKflPmZH+fhxIQtUWAFdxaooID7LQOC2H2Np8A7YTp
wD2X9v9neZI/NUo0R2a5t3lOONh5wx02rNRZur3KN3hz
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341457199681859310723773735531022717004467
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 16:11:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 16:11:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lignana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 731555183269244209769983336986429413950197683340259022343965843715045816901133009723121527317969983304063282077261802933550092732966521158802069482023804501436333041678562965518161524578819015956408012910014365899001147049734936518890896361394328411829919470064214890523595458316335735105398399993012071753698223903777464002793574144446617408617897704935377515019389075639097920853247274640311537060435295164935363886149839687283044571626482942150795094099199833991597857996912542628402377850073632374730259895646979848711133618972967799819107632862961426222658052404875212320293594608794450469450985134613352106861784845607979122809878731214959776139539212152619541818753300658308466883120798699869881133657374493920907298597938950818387714707540907085616238212777135105077834196634689588781266618271518297195157324407118246036202965837801624828640574045887322813296203729655233055803485719840838933241283905942236619578876032649062148195887985586864626608379018219896504317457279005095444465574173814933594494665399588709001815841650752276970734624858753893952847200113743002526199807863998467840855219713387953424164126999458885616858768940858492616753688245028238057227275949528501856565492182465834964813364207888522192718629331
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1bd1fbb9363e9e0b0008c1e83008eeb8638d5fb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lignana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016db1813dea00000403004630440220718adfc521d4026684afe7e4bb8843ace5e075b7e8e34a483abc76aad0e938bb022030e98fb4a9c44c4cfa0aaf099ceb267ab66020b460261357ddf4be645cc440b0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db1813de00000040300473045022100f5b6c686636b987f4580f3d9ee9a0a0335cd385a9b7dc45ca0b6588ea69beedf0220284ba7277ac7fbeb4d52760610ee6ff68269bc3862b92c3c9d5c60637329bf90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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