lightstreamtechnology.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:46:ae:98:2e:84:c7:84:c3:1c:9b:cb:1e:94:ff:cd:2f:dc was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightstreamtechnology.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:ae:98:2e:84:c7:84:c3:1c:9b:cb:1e:94:ff:cd:2f:dc
Serial Number (int): 285388699323646212274404288049167366696924
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 06:c1:75:f7:3c:d5:e2:ac:6a:70:87:b2:c3:41:00:32:10:d6:91:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 57:26:74:b7:3d:e5:99:ad:23:9c:e8:ee:3b:89:f4:eb:75:b9:eb:9b
Fingerprint (sha256): cb:4f:7c:18:7d:dd:f7:44:02:e6:7f:d2:82:ca:0b:9b:27:84:f9:96:9f:d6:2e:82:38:cf:f0:f7:b8:9e:9a:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lightstreamtechnology.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightstreamtechnology.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.lightstreamtechnology.com
cpanel.lightstreamtechnology.com
lightstreamtechnology.com
lightstreamtechnology.k9dogtrainingclub.com
mail.lightstreamtechnology.com
mail.resonantwand.com
resonantwand.k9dogtrainingclub.com
webdisk.lightstreamtechnology.com
webmail.lightstreamtechnology.com
www.lightstreamtechnology.com
www.lightstreamtechnology.k9dogtrainingclub.com
www.resonantwand.k9dogtrainingclub.com

Other certificates including the domain name lightstreamtechnology.com

(limited to 100 certificates)
lightstreamtechnology.com
prosperityalchemist.com
lightstreamtechnology.com
lightstreamtechnology.com
www.lightstreamtechnology.com
www.lightstreamtechnology.com
mrmaximizer.com
info.lightstreamtechnology.com
info.lightstreamtechnology.com
info.lightstreamtechnology.com
info.lightstreamtechnology.com
www.lightstreamtechnology.com
lightstreamtechnology.com
www.lightstreamtechnology.com
www.lightstreamtechnology.com
www.lightstreamtechnology.com
lightstreamtechnology.com
lightstreamtechnology.com
info.lightstreamtechnology.com

Certificate

The complete raw certificate details for lightstreamtechnology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3uWzXZVReheOPzyuZPB
+V6MYQqBMxfCNVYijZF1G4FNEuWKKI4HfiqVAj7y1xbIvFYxOriZrK5Ya3iXKh15
l81viw6WFumpUPXD5WoG22EuIsAfTCFJbKKffZi7pKUBGRJibrguXrhRJZmd+8LI
wA0AyjDrV/PA+YeBNhsaIRqo+rn7+lkkQfaJ6k0AnmKlZKqQXrNxllxlVPwEbCRx
hsREqxsISJfUPvPDiSRg8En/uZt7v03IRMpyjU1/YGfOijRFlKQZ+IDEipbthRqY
gj7uLKVPkUFpQTFxGkvS9XhxRlc60Uk/IH1IJWtTMvUnj8PUEl70tV5A5PDmUx9z
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285388699323646212274404288049167366696924
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 01:52:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 01:52:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightstreamtechnology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25687319951226999194977319894642255699833287647848082945540030881422584352516496135384641037311637805664391293939658490946099236710415247194110724462400004267850660325544628397761682238230458548859629952709529965261448249513792045380557776218968498545260851671525018259306858676986293828997441231146893417324073352674642149928308360682780319582845040487472327887046024194882924412930724013338174756496386759458472437487727817665821408703293610145930651393794652829400571889411483293846334227982669525238871654635319650593643774743584726853609418338474890153898220333379799147551336735129070873935896787958594078209003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							06c175f73cd5e2ac6a7087b2c341003210d69104
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (431 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightstreamtechnology.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.resonantwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resonantwand.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightstreamtechnology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightstreamtechnology.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.resonantwand.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706082d61a0000040300483046022100c755b71bf70a49c42a04e8bd2c06995c5b82380e1e770d30d340eeb2830cccc902210088774e47fff32d62e3dcb5c5344de9efac4a24454eabc272163f15a9a61c9c9e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001706082d62f000004030046304402205d7cdeceee5bf9ffaeeeddbe2d4c50c378a54589614f89535b7923191f91bfe50220257df165c59ac885756b1d78c938d7e51e656338659e065925a8655a266f55eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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