lilymagnani.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:7a:98:fb:d5:eb:ba:76:99:e8:81:32:3d:f9:72:94:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lilymagnani.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:7a:98:fb:d5:eb:ba:76:99:e8:81:32:3d:f9:72:94:45
Serial Number (int): 287701560200634622186541739656228386280517
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9a:fb:98:6a:4f:4a:4e:51:d2:e3:05:12:b5:69:90:b1:59:48:27:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2b:5e:52:78:df:f9:21:c8:fe:6a:ae:9c:3a:fa:70:69:67:d3:68:e1
Fingerprint (sha256): f6:a0:dc:a8:b3:b9:60:fd:d4:d8:97:1f:bb:59:ad:cb:1c:af:11:a1:3e:e3:da:94:d9:d5:18:00:ec:af:f9:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate lilymagnani.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lilymagnani.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lilymagnani.com

Other certificates including the domain name lilymagnani.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lilymagnani.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287701560200634622186541739656228386280517
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-15 05:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-13 05:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lilymagnani.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892370214211362672738853479608901538395996541400814647763393614159030528998560184376338153955101109403120756770037398765375699272561715362485427704082348136265062836640638565548355736618614497692345366108559117697807548677217786724634301505310431055385861792502179491668586030348430701150300688761484191532221429971958371560849099542213026770427513934337445885002993818265827333887880776013387771133417562969350372503016282642904966409660682451217438867601128655984872600354324987830363451028953669980204799870181344047376033130704646912595830637264462446263307211095166521009912335444615451921574859694436222835258042658898925218759320389363693386418516695020184027241962083035725191159956998150906914921501971179606873522980639620731680680638636657232760201275920861018771586137953085430411198475986333116701678603485769689058663068038443666584379868665981989805189915720499090338275351357667659030090816783876611779206327867829778514974813447643995595851661143726749870371010975478355230589598833606496217420834168835021899858460886915296726481075993485410088488260150127387969217302779796881194290059816845647058948694530567056680730925294333827468580176513588745060255207246666881215800955698395489581487751942314851374594636097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9afb986a4f4a4e51d2e30512b56990b15948274c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lilymagnani.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0081b4fd5ce3c00882fd1252046bf81bb3157b111b706f64995485c720b4300f46d51c79fbbd4200c3ffb959ed2053886bba9bd81a8889596886a80c22963ae72c84414a8a5ec8df65a7bfd0be474d17d92900fca399325817f6df3c0729a6752eb189c60b2919a6bb49bfdb5ba79d5a8e97e5fd4b88021da12f0ce75d711acb3ec025b98e310f21883a1163e5f3feadc240504319edfc738ab4e6a2a57628399bc5db2b5ef97cc5d089ab2729d6f5b22dc751d8bb8fed151808a62f85c2dcd176fdb5294c6df31f3d411775453a4e48c79f5d6271f3b25649cf8fc2941c13e7cf48b7601c7c63f4ba37ecb6fd54deae54d70bced1cd215c87de5c80a1df8780c8