luxultra.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:de:41:55:2e:67:e5:31:1e:c3:df:ac:aa:32:9f:37:76:17 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=luxultra.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:de:41:55:2e:67:e5:31:1e:c3:df:ac:aa:32:9f:37:76:17
Serial Number (int): 336966385357910347777672576344596424390167
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:7e:10:9a:51:fb:3c:44:7b:22:43:c3:16:dc:c1:86:db:19:96:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:3e:36:81:1f:41:df:4b:13:31:90:ae:b7:f6:81:02:f7:21:6c:4c
Fingerprint (sha256): d3:e5:f8:d5:d2:4e:62:f2:88:fd:27:d8:1a:9a:92:9d:87:23:f0:ec:2c:7e:b3:58:e0:76:6b:60:0c:1d:41:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate luxultra.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for luxultra.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

luxultra.com

Other certificates including the domain name luxultra.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for luxultra.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgISA95BVS5n5TEew9+sqjKfN3YXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTgwMTM4MTBaFw0y
MDAzMTcwMTM4MTBaMBcxFTATBgNVBAMTDGx1eHVsdHJhLmNvbTCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMaHcTaJJ4vwtTXwX7VDca1HXHPDlah5Dy1N
64B73RAYJNWdtKKjn7RB2nfge04Na8feJM40qdfNImWTdwU7+KsRYr4L+nZ98FgR
tOgGbflBrj402MMoGkZj9Do6cCUm1uk/v8YqxkeB9A89ywEOtc0PcZj/G7t+cyAE
kBw8PevvEZEI5u8U9F0ImU5kHd/R3t+fXTFM3qe7aYmwkUmwaSeK+EsiTy3e+iuc
SawtmOaEb5E19LVq4jcZiKoQDFnU5Z2kHpfWnp5Ha4ZnJCbWl3wxSLp8vqfdePnR
VHidzpBC2KczFo8dskm8rbAJRmg2GOA8EReFCrKhNKScrXYJ47gh8341AyDbo8Oj
/xJJAXGxYDFxlx4TV+f2NkghGn81Ts0HDCleZ0OukDFny6CX2JXy57OrpgVr4PII
ci2eATCAIx9Divb6URtvTyJtcMJ9bKSk7GyrfqsyV1tXIwKMyVllOFqSZPHMGnxs
USXsHIiAO0NmzAFAnI8mubVubPuEfHhubSsvCprGO/99FkkYoDF+si1cf+TRC378
a1Mk/A5HgTBj8N0mmNi9HfFenZ+euM5ik7tt3TpX5FPzEFapFCKfxdzaMLVIROa1
DrdVmiTaPasHO7xXXhl46C05HtJRqk9M9j+z20rHqAL3mw2V8FJHddTnwY/YyTbZ
bbAqmWSXAgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC9+EJpR
+zxEeyJDwxbcwYbbGZZoMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMbHV4dWx0cmEuY29tMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv
AHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvFt6xkgAABAMA
RjBEAiAQZWEEI5najNFgUy6sxJ/YAUP4zpSsKXCWwl1hzu9JFgIgbtsLTsEvG4cR
9neZFlolzFbnIifVOagA+2vSGPjFIUEAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLB
ACkGjbIImjfZEwAAAW8W3rHaAAAEAwBHMEUCIA8T7EbOekxa/3FYCMj9TMrSDoMj
fG3UQrIghAad9GbZAiEAq5eFVRRsUFD5sv9z8rDnUB3uSHKfmE8etXMsbnTtoEow
DQYJKoZIhvcNAQELBQADggEBAInb77vw1NABL3PuVucmfgbyjs+LP6nFJzu4Y0XI
Oqr5rhmOUnprQjS9CG/GeCcGEoEribhLj7ESnfjTp7KlNYGUvfW6eUZFM1dwVDwZ
th5JQIaEf9YRx/epqYlIhyeKhBJ85imF8dlLGPlKZKfoMIIAye6kFz35yM/yfePm
58b2W10DKxG2P+sex7A754NxU1zcvR9PZZZV3XbJIrHfgYlIK0bwsVaPZy74ooUu
u5LbW83FvMKZEXihwDoW/SJCzzYXgMMjUIcETStw3cC2hRO13SPgLW88fvJX5klK
qqx0axg5qdXXtFDbQkNq0bh2jnjMYOmdw7930ggzkyAE/KE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336966385357910347777672576344596424390167
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 01:38:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 01:38:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'luxultra.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809927947829104336289248939801652387849442710894288828291867781067225746589548115758562223838610373134913151589180442760888572123597459991385526949459901298467197269592067199767853497454340277898080028617212034082636071327451175311252934111904039971357136046046966619444909331281332863705201447527702018931059218598577636094957908129995438848924126246632466503126520841771464690909980658831845431767964258133673617423165826313637754914996539882149351171331722455600065695979323559604818659054034256269819005264802730616284533428207154905585455301439049335351928090835483012751177404669003191125805414596509079791296746666607826410054658438131247689961084107454559526865530364865205304170349491662859273166913079464206387418906911130097459346803988956520255834847648925745951742334645742276963171380618245172930184050005183481011775615837197655067964315144665569374119067443654443277280597635896981032403543331599156312705853091182699144826231831780193771080532597320217070933819813131436937271978764190412060484937351764685005507211303727409209913873066162736103076830002811020174131261690486674615748266321544980088140853851380563632480348963259039912725081073922686204653376880497192377982628917380046466008226159704712056996979863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f7e109a51fb3c447b2243c316dcc186db199668
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luxultra.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f16deb19200000403004630440220106561042399da8cd160532eacc49fd80143f8ce94ac297096c25d61ceef491602206edb0b4ec12f1b8711f67799165a25cc56e72227d539a800fb6bd218f8c521410076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f16deb1da000004030047304502200f13ec46ce7a4c5aff715808c8fd4ccad20e83237c6dd442b22084069df466d9022100ab978555146c5050f9b2ff73f2b0e7501dee48729f984f1eb5732c6e74eda04a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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