lipmate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:02:d8:de:91:41:c3:f0:8f:1d:1b:85:f0:f7:bf:5c:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lipmate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:02:d8:de:91:41:c3:f0:8f:1d:1b:85:f0:f7:bf:5c:96
Serial Number (int): 337904174858808276551064868439160126397590
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c6:56:93:8f:f3:d3:aa:89:6d:a0:3c:33:02:f6:14:d5:03:b0:41:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c2:94:0a:99:78:02:73:c0:9f:91:cf:b3:0f:c7:f6:b7:42:86:9b:4b
Fingerprint (sha256): fc:72:92:16:4c:a7:2e:94:f6:81:29:e7:fe:3a:54:a6:64:f6:23:98:8f:30:b1:52:c4:f3:08:a4:25:fc:7d:b2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lipmate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lipmate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lipmate.com

Other certificates including the domain name lipmate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lipmate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337904174858808276551064868439160126397590
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 04:39:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 04:39:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lipmate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 876814725270472910786588163931712441687333826435559276518920794899752941310401609125032968584201219034525386857391582152242584603836922263860861820611258263041636914415272311180339315890371453107306620321362468439760592600237148125730798723192325648313804120043906753765407629776942148000561689163313909892260996090013570378339985105306049427036541941906094319193814795213069742642261857508854210970349006631075196868950784975051355576609101419029592282487424037329204590495933927993302812761774755754196952662408402342044304526579853384162438740356263895839479800972252693704024964904366626252434177602546830979751049963847513106016969666915260941879366378044384905299698494485687981987702554596629350895805789375854781933004135794932542440575418516953463859398310102641539559116008728273478817081479218145247100821038362833055610040087288234347567230283603656351401843922207804520787453039961670307407570479342331583909568496142319398001316832435617648579053679272965001687275941129819605455545414080321271885984506624206955200351721549452771820166761025620168330268023732743508355441020604803800662178977156428209576627445009810299007292708952918417147916254502531234119992893048417331232171246622511748344474671901235851644520661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c656938ff3d3aa896da03c3302f614d503b04127
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lipmate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe7ab91c0000040300463044022063ac7ad2e830c76bac256fc8cb9f3965acda5791b42b04ef2954f869d1b6463502206e2358203db2716d9fb8c36e7fa944019e275dadc31db3162762da06d2e2ea140076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe7abd0f000004030047304502207e0ef3433d870e774734427ce5f3409e2530c9bede912c1495ae62e93f0caff70221009c763733880822d210b9f210bfcaccba52a7c426fe144e8c791fce53f7e3b63b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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