marijuana21.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a1:8a:f1:5a:ae:37:13:82:82:0b:79:51:83:2f:0e:c2:16 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marijuana21.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:8a:f1:5a:ae:37:13:82:82:0b:79:51:83:2f:0e:c2:16
Serial Number (int): 403419291447492914355587736868109396394518
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 2e:1d:f3:ed:c6:f5:a7:5c:60:14:39:29:e0:ae:7b:87:4c:a5:89:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 95:5b:ae:31:76:8b:35:01:63:62:a0:67:af:47:cd:c8:3c:77:13:f5
Fingerprint (sha256): c6:a0:42:c2:55:e3:d8:89:03:6d:87:11:76:50:44:85:70:ff:8c:47:40:e6:91:4d:8b:9a:37:28:ee:f2:8a:18

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate marijuana21.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marijuana21.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marijuana21.com

Other certificates including the domain name marijuana21.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for marijuana21.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuM81WD/QfH0RgIb8P8DS
FBtkfuG8UoZ5LJ/DwCL3i6F8m62ScB0zRqCrKaOsOo2YpP3HIoXJ4oew+TgjxJLc
6qfNVn4pD2zR0rWb1hGuPay2VfG2b5fZWNOxUB3oEfJeOqkIZ4hrxlbeBraqXPNr
3hg6LsEsNqSN49NmE+mNx6+jXGg1QOuIMqDW/lwd2yDJaVRVEYB53HbOFAxyBcZr
F9gQRlR+MUEhMH9oy3+0v7GPtlZDdf3MQ/o63uhtCV5JF+GhgH/gsfWset0gwyzt
vE7VU8VBvb58u9v6cHaFnr8EgPaIYddHLqu1lfTTqofeiEgkBAHiCI8p3QFStREu
kxIF3u0a+fpsrwXePYjS5C2TzJnBghiJw1kIZum2s0bH48Wu3Ku+iD1bDm3Kp3Es
qo2/J3ZRJ7B+LXyWVs1CsGRLB+/84NOZvH1b6/d2hiLE65ckz0QHKpkiWzDAHWTG
mdY29DxB28yhGzm+uFrLwZxshlBKnQ4EngBeEY77umVaK3kWkv53WkZf537Lsh2L
UNG3U/OeWpI2PTUncqWHDN/StJbxDELmpqlhJ6b0aWM+tPR/YmCfUeuzmIDRn8dG
uNdPbfdRWqZ8XbVntaQYNXe9Q7oet6O85GcNRBcP0HfDM+UABBVpwglId+QEg3vB
TOUQFhrl+CG/13NkBNJDAcMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403419291447492914355587736868109396394518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-13 03:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-13 03:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marijuana21.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753956603943227926560567444175791633505013532358611735250443828969189979482906045673216726725051607979433808014913762579095030300720912018349272125649275647552929488919960408966460729812728942631105449525357581819009936446372843347822542389270702777912173211285968139358125965986752957658187593154662025210253739059249381784675556442786856131102864675615878179336157114352116461878659736370489698341288952362396898456820138442921875215805649140901212346002859502139611389275620222973843317684907454970957489199914924103043039890731657781727936893966291727917566604827244288387866435652481705446213890261866651505197900147842162810083473728129304269497985184192539198039067045557186904800036578886794011663943034345082381553086983100799776912979785691154916664100967040668606863389130705678498283089202496304800030961247263880925657078273784501058353807663543389186708803609393859727495498529221088418589700932412058729948370734639624221901774184624791618325413670931537989170865653651342166401339306802718028496288029379086187517896409164975378910016907502575657580580351359591744827143891033760176694082507315890473542048836641342955702657469607541962599298881203861383968220624441467181916141091325219675749030333587562544721232323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e1df3edc6f5a75c60143929e0ae7b874ca58970
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marijuana21.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167a5bc4ce90000040300473045022100d9775f76b0388fdd6524c1075bf668dd5ae0e482c4a749be610a3f03da20fc560220123bba71ada5d8f0bdc96f2cce96f47b6a7cf710831cf406cc48f76c1b4aed92007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167a5bc4c740000040300473045022064f00f7e82cc7e92143804859cde1ccb69682cbc9e2161d859ac97f703d4d38d022100acf0f7d0893200820b483dd055e95c40c977a502f151b2ada9672166296b91b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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