lightstreamwand.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a8:a9:d1:dd:2e:9e:33:e0:53:39:2c:a8:1c:b4:56:fa:91 was issued on by Let's Encrypt.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lightstreamwand.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a8:a9:d1:dd:2e:9e:33:e0:53:39:2c:a8:1c:b4:56:fa:91
Serial Number (int): 405842310577195712238626826187698670598801
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 89:02:ff:50:68:3e:6f:ae:9e:31:00:c1:15:db:45:8e:a3:b4:35:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:7d:6d:78:14:36:d2:6e:2d:6f:5b:f8:de:a6:36:05:42:6f:0b:41
Fingerprint (sha256): e4:f3:c8:74:1a:e5:ac:f0:b3:f5:2f:28:ac:1a:6e:97:5d:28:74:e6:b1:af:81:84:d2:9f:40:dc:ab:fa:e4:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lightstreamwand.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lightstreamwand.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.lifeforceharmonizer.com
autodiscover.lightstreamwand.com
cpanel.lifeforceharmonizer.com
cpanel.lightstreamwand.com
lifeforceharmonizer.com
lifeforceharmonizer.k9dogtrainingclub.com
lightstreamwand.com
lightstreamwand.k9dogtrainingclub.com
mail.lifeforceharmonizer.com
mail.lightstreamwand.com
webdisk.lifeforceharmonizer.com
webdisk.lightstreamwand.com
webmail.lifeforceharmonizer.com
webmail.lightstreamwand.com
www.lifeforceharmonizer.com
www.lifeforceharmonizer.k9dogtrainingclub.com
www.lightstreamwand.com
www.lightstreamwand.k9dogtrainingclub.com

Other certificates including the domain name lightstreamwand.com

(limited to 100 certificates)
lightstreamwand.com
www.lightstreamwand.com
www.lightstreamwand.com
www.lightstreamwand.com
www.lightstreamwand.com
www.lightstreamwand.com
lightstreamwand.com
www.lightstreamwand.com
lightstreamwand.com

Certificate

The complete raw certificate details for lightstreamwand.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VqOzyq3otO6ukoFBrLE
R1i3aOLICQT24pqe4Xm0jrh8QUMAWyM3SPqr5IvBmKv7uE4ejB0Hwt81ay96xmxF
47DB6ivB/3y5MzZ7Pp4zllR0xXixTCSiDs6yOl1NBNjGtXeGjh+0g/QDnciNQhcc
vx/9UfdxpR6YhT27qa1x8dn4Yddc8MNi9OulxsIwy9zkuuirfVcG7mppRagkXeWu
+Ag57sRPRKOB3DnuQ/RgcL2Mi9Qyt2/6IIcGOaA+/8/kgy+FybOAiLQ+CfGC5wbc
0kP+xW702oXrV25n/QiTADyIE/0nSwaClrgAPVet4dGHKc3E4TDYGFpPcpKcLy02
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405842310577195712238626826187698670598801
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 01:53:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 01:53:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lightstreamwand.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29963134016450393603214005850485613400904996898509657247678831536637961895809933931907088946378496381127971001176682636393847553813813084126615663509524077011812819611273166686642804362613345276430714524805547080111647565665871741895139862727672424579646445235877297151046267565089260735382172531701357757882243662245495861608543191820241689972065972606035402761623078122425878554442745356734307991279265844623548385153832283693037721099379450259300638716476080769873543711566561770210207298371541963798034649258683759558528379114049495726207144461085873858311586972090048702469114447329590530689060567454087857911439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8902ff50683e6fae9e3100c115db458ea3b435ba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (588 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lifeforceharmonizer.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lightstreamwand.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeforceharmonizer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lifeforceharmonizer.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightstreamwand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lightstreamwand.k9dogtrainingclub.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f213974b10000040300483046022100fed0181ea19cd737f7bc2a074c79b69deafdfdba9bf86cddeac6c7bf0687e3c2022100ff5abfa6dba5de185413db932874ec0ba15dab3e83654f096cfbcea4e691727b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f213974a30000040300473045022100a7c06039397a2c3e4c39800c2f16b7a9724f28de99dbfc86f92f1cf9c74435ff0220163c7d555c97d8a4f5777f20f43ae713d658676440d3a5dfcedaa83eae014a6a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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