www.lumicom.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ec:b3:ff:f0:fd:4e:6a:8f:8b:d8:f0:44:0a:bb:48:65:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lumicom.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:b3:ff:f0:fd:4e:6a:8f:8b:d8:f0:44:0a:bb:48:65:ef
Serial Number (int): 428995043055174188933437921874666437764591
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 29:d1:71:6c:52:eb:9b:31:f1:88:2f:0f:5e:e5:a0:a8:33:3f:85:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:ee:6b:31:bd:ff:19:55:24:c0:8c:a9:c7:81:37:19:48:ca:18:55
Fingerprint (sha256): c4:ec:79:87:6a:37:72:c2:b7:d0:6a:58:1f:4c:87:90:fb:c8:76:34:a0:da:c9:e3:5d:80:79:a1:61:46:de:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lumicom.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lumicom.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lumicom.com

Other certificates including the domain name lumicom.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lumicom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 428995043055174188933437921874666437764591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 23:36:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 23:36:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lumicom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622111755368728996434633991929491117052293410628623451867082336135460647606682604874613442849185785704954719287825890541709423827971981487595291470568924842141698902216786530819288689462495395446954446666467716730677958191966462755340659880810595925985964814554275358390756139605626773027430219814738510711138279165101150181347471980847544564926615674690826746884246136910605697406156729655872584756289844376660983614268426768511810503432353410625908014050693068022532037738659029487445004989899612919956589973639938895030443701587036623342043428578733243411625465718906615325667518307124463932356768065800443993578921547760401787439046974030849941424645578298315153339715074550846585648087807689759451722261127426081946781750328126783895312870809753355929882746486997369582919353049672008814738461237551943454877527682482413212483668655669647164301519961682315159771221436798004754679134391877663270288454976878334756392273589113403618618446590400695406424922317449779683128617154604843951064725453394605546956203853744263282148714936352954177726500892237657868171422928715413555406911128705267035668234137094044503480737444232101910915590133509059210535125438530775684914137899165638260811830237720363383723573781521169395655585341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29d1716c52eb9b31f1882f0f5ee5a0a8333f85c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lumicom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef788ff0c0000040300483046022100ab0d1173afbb8bda7e555d19e1c374ea4b789009f799f2d80a03344076c56857022100f6c5e002dbe41941f6f6371a3a70f733113f18a38e42e3c1c02243a2262626df007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef788fefe000004030048304602210084b7ae64e46014da0f6a30efa755fba100e13589b7f3eb0e68645f058f8ae7a4022100db799468d5ffebd9e870901291e02910310a0ccd8852b645ea1fcd92c4ad0f61
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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