botanical.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:b4:f2:23:73:6c:f6:44:5c:2d:a0:7a:8e:21:fd:65:9d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=botanical.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:b4:f2:23:73:6c:f6:44:5c:2d:a0:7a:8e:21:fd:65:9d
Serial Number (int): 305133519055271210465174941089833062065565
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e4:53:38:e5:25:f1:11:db:bd:87:7b:55:cf:7e:d9:50:73:33:97:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:36:24:04:1a:6d:c1:03:c5:75:f1:cc:04:24:4b:4f:16:8d:ac:6b
Fingerprint (sha256): cf:2c:91:0f:c6:83:61:15:76:06:b9:de:d0:71:4b:24:5a:53:41:54:b3:c6:99:5e:c2:01:cd:c8:97:67:53:6d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate botanical.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for botanical.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

botanical.life

Other certificates including the domain name botanical.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for botanical.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305133519055271210465174941089833062065565
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 03:43:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 03:43:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'botanical.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 953334784221480707754951224411530902268261200434861368774728763545915854803007244062267342953565712737172890256518826952167780240986055594760241219985455433523630517639973094385330268108231381706437464774325707956625864043327595414442923328818255613880731303076609937094193301069617742499297016493030451767832949020292338459621841957926744575218569757720219300063364728488640708619230051101857822080514050747963395290027392903089174604033190842853141638340136155809249288062469000926826717280995100488609249332128174852926710732285055578383820750343527696245473915608237728164506422230082070949181832408970010615121419931422893457891179878735222876666112855486109050471995049763751184989526119499021558110866112722105205007224250600523066953861382496873953450935696126397456754804261157273349247216548447192861597267631810084217779635268580554237217282420239884736204505594717698953757238437827646788327825724825244735767289472823481640973862864025567232680856825945708386144718666811447081422148720810557510933865500044343343354558376633134407171788413879558811672731242728155733540061982106644185535292233944891832191768102217276066234518079518131488327136484868078835989687116263744379109949021250560729054520334137927812382657893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e45338e525f111dbbd877b55cf7ed95073339798
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanical.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a8b73db6e0000040300473045022100e61c2f63c0bab6faa7bf2b82728f4427578ec268a0a6890aa8b0f9a9d80e0c8d022035fb2d63cfbbebd43500b560a3baa33835036cf6cf59c837b21e2d4d96002fbb00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a8b73dd5600000403004830460221009c9fc929249a1199a1196af9416f8b329fff67c95ce08647c827eab429fff9f2022100ebc6390a90fddd73df8243ba899bf86d02298afb4cf69f5bc29f73de8faeac9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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