www.lignana.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:1d:ed:75:9d:ba:7c:95:24:7b:3c:88:37:57:d1:8f:99:e7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.lignana.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:1d:ed:75:9d:ba:7c:95:24:7b:3c:88:37:57:d1:8f:99:e7Serial Number (int): 271520684168834731461429199886325684083175
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 86:7b:ba:95:08:e0:1c:70:2d:8c:41:15:c4:7a:03:dc:3d:1f:0d:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 71:f8:db:3c:58:a0:79:da:0d:18:46:b5:1b:10:62:00:1b:8a:d1:18
Fingerprint (sha256): d9:95:f1:98:29:f8:72:e8:69:12:7c:8c:52:83:8c:32:f1:49:b0:ab:9a:67:d2:f7:ea:17:43:95:4b:aa:b2:ec
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.lignana.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.lignana.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.lignana.com
Other certificates including the domain name lignana.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.lignana.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgISAx3tdZ26fJUkezyIN1fRj5nnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTExMDEwMTZaFw0y MDAxMDkxMDEwMTZaMBoxGDAWBgNVBAMTD3d3dy5saWduYW5hLmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKbGDEmmtan0P6307YbNPq9S5HaEM3lZ dJWChFzOq8uwJmqWGDH48B2DREWPzLVPsycs29J6Z+nhvzzucPk42xcKSrf74E0K tckhbilS9EGLlgOWWn433PQ7bCK8nZhcK/ykim4ysdt6Bz9/JyL0HUUWwMe2eM5l rKDsp7AMX74wfXF58qt8zdVY7Ke8vxHUSaEs4AXLps95a0/8CKl7igr8HOuyzU99 L4Q/t80P+ju0YpkNhsN7iN+zQuza9bXchPdoQ0U9kH9r23ikkH4Mvr6Urwd5Y71U RoR+IRLnAJ49Xg6XYnsVD60Y8rwSdt2z+9OAy6E8gz3WxLeuW6yK2htkIAiO5jde Ono3VTbXi4k5oV9UOqoHQPeUnuNbdRaDpNSBwO0TrqcsgY3YD8vQB6yFpuohOKxz tp+bxQgxOLznFmD2rMpvbHaAF/0oXr4i9VvlKChsysEYA6DBgTVpbHZRKxLCrfdZ 4Zhxulzw9dYwJbIO9BadKl78xpTG9cSg1GfJU/cfOzYGqJcvC9q0q2eowF/Qupoo 4M4sLqfDzjEi1tA472EwRtsksVtMl6i+2uaM8G+bvbX1/qWkw37JOlzfcPgBycna N1WPrSwR122l3Yll5APpVupoVcDroA+BqIW6W9CMC7VQBsF2y4bA2TuXDAoZFOau HdZOaGd1tCsvAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIZ7 upUI4BxwLYxBFcR6A9w9Hw1KMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmxpZ25hbmEuY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBgYKKwYBBAHWeQIEAgSB 9wSB9ADyAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtuoMX dwAABAMASDBGAiEAzfOn1vE7wNc3UqXoJLpqLuVGVtI4+byBkrE3raD9VHkCIQCP DwPfBKIlQM3xlNNyLhRQtUeDWkWGkQ+3s67A5si/lwB3AG9Tdqwx8DEZ2JkApFEV /3cVHBHZAsEAKQaNsgiaN9kTAAABbbqDF9cAAAQDAEgwRgIhAP6/K5HjUaZhk8aP uIq96wxEN6iVPNlo/zU19ekziJeDAiEAyVOpFC2IF4hH1DGTSqENu1AB7RmFjyMR bI5x1Fsg95MwDQYJKoZIhvcNAQELBQADggEBACkKDmSmi6GR+V5AY80KGdJ/1c7R 2xFe+H85fEp4vF3EufG8BqCaHVxlAEYVfUDCnRhtiHzHKG6sz35uMHTxWLP4Vu9m +ve1PodyCBT8GO83Es3U63/8YyH0F56RK3HkHz98mlSV3uYwLxM0ktqG8nxBNpZ0 5rNBlg2zUybZS6gx4OtNCYHiny9thFrI8Rbv2BqspRr3o+MjmixMngqnqGfmzGPr LF8wwnmhQ4fVa0LhDZPn1lZa9uAZGPzVXDPwMxy2EpVu2Ik+WAMhTuqPz+E47Blr ZS014vYnpmbxHHqnAtTUyT+8XTUUQe2xcXSbxWvxwoME6LuOpfX2Tzmiybc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApsYMSaa1qfQ/rfTths0+ r1LkdoQzeVl0lYKEXM6ry7AmapYYMfjwHYNERY/MtU+zJyzb0npn6eG/PO5w+Tjb FwpKt/vgTQq1ySFuKVL0QYuWA5Zafjfc9DtsIrydmFwr/KSKbjKx23oHP38nIvQd RRbAx7Z4zmWsoOynsAxfvjB9cXnyq3zN1Vjsp7y/EdRJoSzgBcumz3lrT/wIqXuK Cvwc67LNT30vhD+3zQ/6O7RimQ2Gw3uI37NC7Nr1tdyE92hDRT2Qf2vbeKSQfgy+ vpSvB3ljvVRGhH4hEucAnj1eDpdiexUPrRjyvBJ23bP704DLoTyDPdbEt65brIra G2QgCI7mN146ejdVNteLiTmhX1Q6qgdA95Se41t1FoOk1IHA7ROupyyBjdgPy9AH rIWm6iE4rHO2n5vFCDE4vOcWYPasym9sdoAX/SheviL1W+UoKGzKwRgDoMGBNWls dlErEsKt91nhmHG6XPD11jAlsg70Fp0qXvzGlMb1xKDUZ8lT9x87Ngaoly8L2rSr Z6jAX9C6mijgziwup8POMSLW0DjvYTBG2ySxW0yXqL7a5ozwb5u9tfX+paTDfsk6 XN9w+AHJydo3VY+tLBHXbaXdiWXkA+lW6mhVwOugD4Gohbpb0IwLtVAGwXbLhsDZ O5cMChkU5q4d1k5oZ3W0Ky8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 271520684168834731461429199886325684083175 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 10:10:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 10:10:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lignana.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680377029914790323799078417907237557066898216188781843854154509985871140455044834900682068212077754063584225022318875287258983447590084031198589788196070151640282927753573116529354918885067543449867153639002421705402856361381935417673887719995580446856121929239951740074862718644457226054849331769394892736324631853702511717743412366810910432534717139672162199211530068324081592325529997595417095300948473133312140709954789077923644246018450738947876121950199079049242123253177249989030623552822582348782366560625193674907383499443274946170506140718945385869135249701977348147444997600565734675851562346071103941938503228782532291667812139388319685517990781585546641185453470138250521882221390655733965474797847324922543291024173649843927847966745020580164173751553805894800664582466599821605095731224269871406739428085713107562207885717829982653723723213866872905110156572006906200524774710184097286724572077863223201604988908962168016049811227968987546904036111117187236896975023354927249782163433079985348385010022842189590494404154234794479124578653905277341340124269927357519836530790306700306832661595076868925745617585821815077173893270320398896524635414692998679564081055277508454567442114747155990559396232461060362193873711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 867bba9508e01c702d8c4115c47a03dc3d1f0d4a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lignana.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dba8317770000040300483046022100cdf3a7d6f13bc0d73752a5e824ba6a2ee54656d238f9bc8192b137ada0fd54790221008f0f03df04a22540cdf194d3722e1450b547835a4586910fb7b3aec0e6c8bf970077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dba8317d70000040300483046022100febf2b91e351a66193c68fb88abdeb0c4437a8953cd968ff3535f5e933889783022100c953a9142d88178847d431934aa10dbb5001ed19858f23116c8e71d45b20f793 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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