www.lignana.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:ed:75:9d:ba:7c:95:24:7b:3c:88:37:57:d1:8f:99:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lignana.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:ed:75:9d:ba:7c:95:24:7b:3c:88:37:57:d1:8f:99:e7
Serial Number (int): 271520684168834731461429199886325684083175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:7b:ba:95:08:e0:1c:70:2d:8c:41:15:c4:7a:03:dc:3d:1f:0d:4a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:f8:db:3c:58:a0:79:da:0d:18:46:b5:1b:10:62:00:1b:8a:d1:18
Fingerprint (sha256): d9:95:f1:98:29:f8:72:e8:69:12:7c:8c:52:83:8c:32:f1:49:b0:ab:9a:67:d2:f7:ea:17:43:95:4b:aa:b2:ec

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lignana.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lignana.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lignana.com

Other certificates including the domain name lignana.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lignana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271520684168834731461429199886325684083175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 10:10:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-09 10:10:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lignana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 680377029914790323799078417907237557066898216188781843854154509985871140455044834900682068212077754063584225022318875287258983447590084031198589788196070151640282927753573116529354918885067543449867153639002421705402856361381935417673887719995580446856121929239951740074862718644457226054849331769394892736324631853702511717743412366810910432534717139672162199211530068324081592325529997595417095300948473133312140709954789077923644246018450738947876121950199079049242123253177249989030623552822582348782366560625193674907383499443274946170506140718945385869135249701977348147444997600565734675851562346071103941938503228782532291667812139388319685517990781585546641185453470138250521882221390655733965474797847324922543291024173649843927847966745020580164173751553805894800664582466599821605095731224269871406739428085713107562207885717829982653723723213866872905110156572006906200524774710184097286724572077863223201604988908962168016049811227968987546904036111117187236896975023354927249782163433079985348385010022842189590494404154234794479124578653905277341340124269927357519836530790306700306832661595076868925745617585821815077173893270320398896524635414692998679564081055277508454567442114747155990559396232461060362193873711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							867bba9508e01c702d8c4115c47a03dc3d1f0d4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lignana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dba8317770000040300483046022100cdf3a7d6f13bc0d73752a5e824ba6a2ee54656d238f9bc8192b137ada0fd54790221008f0f03df04a22540cdf194d3722e1450b547835a4586910fb7b3aec0e6c8bf970077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dba8317d70000040300483046022100febf2b91e351a66193c68fb88abdeb0c4437a8953cd968ff3535f5e933889783022100c953a9142d88178847d431934aa10dbb5001ed19858f23116c8e71d45b20f793
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00290a0e64a68ba191f95e4063cd0a19d27fd5ced1db115ef87f397c4a78bc5dc4b9f1bc06a09a1d5c650046157d40c29d186d887cc7286eaccf7e6e3074f158b3f856ef66faf7b53e87720814fc18ef3712cdd4eb7ffc6321f4179e912b71e41f3f7c9a5495dee6302f133492da86f27c41369674e6b341960db35326d94ba831e0eb4d0981e29f2f6d845ac8f116efd81aaca51af7a3e3239a2c4c9e0aa7a867e6cc63eb2c5f30c279a14387d56b42e10d93e7d6565af6e01918fcd55c33f0331cb612956ed8893e5803214eea8fcfe138ec196b652d35e2f627a666f11c7aa702d4d4c93fbc5d351441edb171749bc56bf1c28304e8bb8ea5f5f64f39a2c9b7