pak-lighting.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:69:03:22:53:05:8a:1f:73:f0:93:74:39:d4:19:dd:a0 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pak-lighting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:69:03:22:53:05:8a:1f:73:f0:93:74:39:d4:19:dd:a0
Serial Number (int): 289039314728504325669727846885648059981216
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b0:e2:b4:12:f9:2d:d1:e1:8b:5c:58:d2:06:54:1a:b6:0f:61:91:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:4d:02:20:3b:3b:ec:b8:9d:4a:43:83:12:f3:1f:0f:33:f4:8b:93
Fingerprint (sha256): d5:3d:af:17:f7:3e:1c:23:cb:78:1d:b0:49:b7:b6:ca:81:64:9e:cc:1e:7a:f6:64:f8:91:cf:fd:a4:03:a6:df

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate pak-lighting.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pak-lighting.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pak-lighting.com
www.pak-lighting.com

Other certificates including the domain name pak-lighting.com

(limited to 100 certificates)
portail.mediadesk.ma
pak-lighting.com
pak-lighting.com
books.orsers.com
portail.mediadesk.ma
pak-lighting.com
books.pak-lighting.com
factures.myadvisor.fr
areacliente.rbkgardens.com
books.publisherpro.app
intranet.roios.eu
pak-lighting.com
billing.acbo.co.uk
books.kinderstaff.com
pak-lighting.com
pak-lighting.com
books.dasgoetheanum.com
books.publisherpro.app
pak-lighting.com
pak-lighting.com
factures.myadvisor.fr
billing.acbo.co.uk
books.kinderstaff.com
books.dasgoetheanum.com
pak-lighting.com
pak-lighting.com
pak-lighting.com
books.schritt-macher.com
pak-lighting.com
areacliente.rbkgardens.com
books.pak-lighting.com
billing.acbo.co.uk
areacliente.rbkgardens.com
books.pak-lighting.com
books.schritt-macher.com
factures.myadvisor.fr
accounting.omega-dguv.de
pak-lighting.com
intranet.roios.eu
books.pak-lighting.com
billing.acbo.co.uk
billing.acbo.co.uk
pak-lighting.com
books.kinderstaff.com
books.orsers.com
pak-lighting.com
accounting.omega-dguv.de
books.orsers.com
pak-lighting.com
pak-lighting.com
areacliente.rbkgardens.com
pak-lighting.com
books.orsers.com
portail.mediadesk.ma
books.kinderstaff.com
accounting.omega-dguv.de
pak-lighting.com
pak-lighting.com
books.schritt-macher.com
pak-lighting.com
pak-lighting.com
pak-lighting.com
books.publisherpro.app

Certificate

The complete raw certificate details for pak-lighting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGGjCCBQKgAwIBAgISA1FpAyJTBYofc/CTdDnUGd2gMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNjA1MTIwMDA0MDBaFw0x
NjA4MTAwMDA0MDBaMBsxGTAXBgNVBAMTEHBhay1saWdodGluZy5jb20wggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDKbWPi2Rfy0t0LODOXd9tQadMkbvta
l5vfLjx3b4hipVF/lXS0lQqKsK4fKgvhkZc9dL9QtNFsS8BTzzAiCq5z/XPi6ZJQ
CqafO16vk30/DMxNAX/LngdHz3xgOnQl99jkqSGagozZmB54RUMeb3OK1pfJwEYg
Syx+hyx6D8ZSFxpVwR2XoJXITK1gjII7VpVC+5D8sMQIlP7Fj1Axc7evNUF3m5U2
TI1hvgCyLjl8c0DeyWdm8GnBBrViMuzkN7F+DIKfA//1K+b2RdbuLa6HHQ2qSl2z
ZHwKmWVVfp7h1yEyEJTyrinURdxdYLhzEdhHnL/mrAzRDJz42d+LyLEMYjNpwkc0
bpMNVrgflFQ2fzzAUc46HXQg1aIUoNSPuhMjiri7cJSsjQXKPNIeGCYiPLkpmPhe
NrwhoJsWfNXPkOy77V/9+htpChgAT40AzKuy95wKomY+Hn0o/faZp3r0eeem9ul+
+U9ypGs3BrES45ALDjUWLNrcz29wUoBi0/XZ5XNUDF9DmREe5+xUm58aws6o/1sx
ztOB/SatBSKP9wVtscHDZwDpaYMH9gT+GHLn6CtX6wj2LfMGIt81Rx+1iJO30tuv
tXWlsYSpUR8VxEcHlAD19qV8URApA+OtCCK+0CLU2ODmYBV2lMQcArym1HwXYHYw
oXkR2Z/VgcPrswIDAQABo4ICJzCCAiMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSw
4rQS+S3R4YtcWNIGVBq2D2GRhjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBwBggrBgEFBQcBAQRkMGIwLwYIKwYBBQUHMAGGI2h0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAxBgNVHREEKjAoghBwYWstbGlnaHRpbmcu
Y29tghR3d3cucGFrLWxpZ2h0aW5nLmNvbTCB/gYDVR0gBIH2MIHzMAgGBmeBDAEC
ATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0
c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNhdGUg
bWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFuZCBv
bmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZv
dW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqG
SIb3DQEBCwUAA4IBAQBCJO22fG8gFhWAKlf5b8oxe0PKWqbXj5zKDsybrspp0W+n
bfifMJ5JilXWFB1ck6neltFwhMSK/A0lbjubb0fssZrkVxWi+4SaD4x7I0XLUlqU
bnTwdxPyxzn4ed/8SI5xhr/digN0tpScDvRUCdSITOwIGodvzEZw0LecEz3lgwbV
Wb8hQs7bWXJZEuHRHP9/Ga6sAjfMLZk5dt1Ss6Tcz6SOXvgML+gbyUQ6DenTdT5s
EPsG8vMl3FwvNutyPd63WwybWC/cpEGqnxKTIyBYM6QR095FvvJzOmrQb/ClOTeS
Mqy9cEZBJKRB3JAY5wKG3BXAdfjxE12vZei5nRwX
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289039314728504325669727846885648059981216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-12 00:04:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-10 00:04:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pak-lighting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825831355644968494268899595352217034388551682180453091836350420769070800271725122685480305248896534503105289410941887698086361922276799486139249090859584020273890535944177430107524677355268253921347953619477279221658510218016199276305677360425979310346143528634038617678689628514605791313403152697353326149385111287171959774818119817717481251797497541423577593769821141627035164747193118200123443493356122378631212257807987102722838985440540728112909038601325587324729081150072349666968086683036509547987668548472619272984232769040939705316789955350279892764037961759455874958025934861472501042743725754798939934930004691996058028109105943751449781401254118792226064283349566035709622225182416219387002652646206003199147292376676025778491785092429183569343544030741342802325918753473776322205294934086222326120551786518428958700140644971509855460360779045656642173516746459808971081149567632578213772022550542371417958087734752555021985329751671166409839465572864342291240127523704351469535428240771071202328464090134912130502728346187200759174412711590741491419178873073222667135113166120709386848021622218112879039124281252185169041421828131941310936217605605634788305961607698114271361683303544991077733350352416689655344414321587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0e2b412f92dd1e18b5c58d206541ab60f619186
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pak-lighting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pak-lighting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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