grandlib.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:58:d8:14:02:75:bc:c8:b1:d1:c2:cd:b0:cd:22:d5:d4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grandlib.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:58:d8:14:02:75:bc:c8:b1:d1:c2:cd:b0:cd:22:d5:d4
Serial Number (int): 300247141629861327264298308585223383864788
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:32:43:68:15:a0:db:c3:19:77:47:aa:69:66:08:36:9e:31:e3:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:3f:a2:da:a2:a6:37:45:70:13:fe:73:9d:e4:db:1a:7b:c1:31:69
Fingerprint (sha256): ea:85:87:59:e1:33:8e:ce:8d:d6:80:f4:da:98:41:ce:56:35:86:b9:c6:da:be:fd:92:86:7b:36:c4:35:bf:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate grandlib.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandlib.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grandlib.com

Other certificates including the domain name grandlib.com

(limited to 100 certificates)
www.grandlib.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
grandlib.com
sni233398.cloudflaressl.com
sni22997.cloudflaressl.com
sni233398.cloudflaressl.com
216.org
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
grandlib.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
www.ticket4444.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni22997.cloudflaressl.com
sni233398.cloudflaressl.com
sni22997.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni22997.cloudflaressl.com
sni233398.cloudflaressl.com
grandlib.com
www.grandlib.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
grandlib.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni22997.cloudflaressl.com
www.protectmyfunds.com
sni233398.cloudflaressl.com
grandlib.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sk.grandlib.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
sni233398.cloudflaressl.com
www.banh.org

Certificate

The complete raw certificate details for grandlib.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300247141629861327264298308585223383864788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 22:32:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 22:32:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandlib.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744069584277997851510579479584623844315788728345754625613254030687972862158944225382111963494851589175718753603492476636200357352259910655079111141795918525873692419243473217882898471163946747587856713841159391062087436973289233748240401001706656790626053230779277538309161026090659624569352646931435153803290103353774462154564259623379241363511794439850916368270655205453446933350857259612310399982107689877800664426043435557439818812579090093610668254827799652732824853321213366899224406739822660313588182648554733877105317358446098746242341527220133316135783253943280048592295847770187584355706714518087871357611264772388002084108394318937115556506678296831000054968813338005784197833457442061916169899584203311511987994762093476742506259547330894993948825105510564060017671462851137813010947891022557978967625002424433933819660442722511406918123034870823182080504937996670786639219940150482915063068447074559752544751482870665004432405164583896015579520139954911713850447219447808446168559680905242339129455771112792593770455436642804849607175635188350479850314252122116772063855712427127885260793254122444800328572129691578606251416934378890190107274232029859190460468607414413844904282648835280981543060689726151105861879526147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8632436815a0dbc3197747aa696608369e31e39a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandlib.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c35c70de000000403004730450220293c69bffabcf7d9d3c34590787a211a066dcbb6dcc5a912e352770971497c59022100a21a1cdb88c428b4e0be3b48af23ee54a4ffdf1f04947c317bead571a0b0cc3f007400293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c35c70c090000040300453043021f7d7bfbc2c13229778069268861808b468f97efef7c1899582d29f2647d43c802203dea1d9ee5f6c7bcfd0af045c91bb47689d7162155f6766fd3b91940dde94c94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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