botanical.life

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:db:53:93:ee:5a:f7:2f:8f:ff:55:bb:62:f1:a8:f4:87:63 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=botanical.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:db:53:93:ee:5a:f7:2f:8f:ff:55:bb:62:f1:a8:f4:87:63
Serial Number (int): 423082076108435383314416296838321675732835
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:49:26:c0:20:1d:aa:1d:1c:82:17:93:5f:2b:5a:a8:be:c6:e4:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:51:ea:e5:08:73:21:ad:fb:ed:f8:51:40:e8:04:1f:59:1f:25:c3
Fingerprint (sha256): f3:f7:9b:1a:4c:c2:c3:ed:d6:01:95:10:99:53:39:a2:67:b4:3a:08:03:53:be:86:c5:7a:99:d3:d3:17:3d:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate botanical.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for botanical.life

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

botanical.life

Other certificates including the domain name botanical.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for botanical.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 423082076108435383314416296838321675732835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-04 02:10:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 02:10:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'botanical.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 772845436617012276674492448128345760687047127858166394983093692335398954432859289904667824324498356484256032933668630946929987805880399891447874297450313697070738663818888679165061570298830906085745292997136006444913325480532615532761316635916237138361370773680860506418628839637000334904609393715658047333703330459714495714111112480424893595265423328180130502929876829396187019640115016412800242292240447611275944232352938688155450562875576541473388639280903108980559021445041095990776376901332102871605449885749165338144488527838990230182140354854166307664937201129151799977464115156179309785015430390185015812070283050461362883453746067494246752409592798318742940944166444620513985554321246341084435828685298208605095054039740866680547238229551430362847743873161305504063146951392758548236602450238140161636343997743507905089318140922150843205009712788399376278324299299368216914302344292201067512260792685706767576574388195475725676807351977519081109276222042148487593592765411540589645708984944769419477263299925733903153192299596073749585549959405476140395698917001383162228224451083318153950771005936201567934694378884837436385458702144123215528760039688808985768478689145487191854220231295831836840436670751192925303056278271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e4926c0201daa1d1c8217935f2b5aa8bec6e450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botanical.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016816d6e69c000004030047304502210091863dcf5731e538eea187711dc6fd5f942a81bdcaa12548318ce85bd370dd5c022023aaa4c722a35fd3ecdc5080eb80dee637376845098d4d84f978add657b1f47400770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016816d6e5ea000004030048304602210090f55d94a2d0a2264255b5ef772eb9f918581377c86dab6c96df51855776cee10221009106dd9f4a94f48a4858715aacf9d396c4b942df4c598c73b41d49e2c5aea2a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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