flexlabel.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:38:a4:3e:12:74:23:1a:11:a0:15:98:1e:d2:dd:46:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flexlabel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:38:a4:3e:12:74:23:1a:11:a0:15:98:1e:d2:dd:46:ae
Serial Number (int): 321982408670627986485276016225775551071918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:d2:f4:94:c5:12:f3:4e:10:b6:68:ae:a4:72:1c:06:55:50:d0:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:f9:08:7a:34:49:0c:5d:f6:95:de:94:0d:05:b6:2f:d8:64:f1:4b
Fingerprint (sha256): 02:b8:9b:c7:76:67:10:ba:ba:6e:b6:31:87:36:2b:47:3e:b5:d5:d9:38:2c:ec:7e:bc:d7:5b:87:10:66:aa:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flexlabel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flexlabel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flexlabel.com

Other certificates including the domain name flexlabel.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for flexlabel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321982408670627986485276016225775551071918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 14:41:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 14:41:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexlabel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894347173680412089827444549121382640024681041108872210500886940217823442355909409873862589511098947127941901557077260302409530264501630979689186586447541054568141526789845947333509377989250335295159246034232690730595507765308711571618165789688956133663620133013662743713955471278796092859812563007181837322043716438760322862835994135556645057161067051610578344068648173375399557853579324288576391510284895169963167615932601360978914723164004531771552722716335001554905661764575692539758176681016023075197334029012944216598829383214387954568715232435562646299728732916045554797843417858399727122689875093516771178809523828799692235429248979643751118508761171995405114044288750917295710584725768342412014282475584706657947918539944601279087124346859454561944133898170152267375688221322133237191556473913193667860488296352681330079893947654782815107064471395382163736172755424182297788757870952166369906947973312618595976188500964914303394919481097487503456435677074408675995142300118517559883349040012923328312255464082884906772597384494002851932078364531503905018585066213727093520457218625379699587859553691054056674665122902031697910371427922387909512438894136941215959582258810659217509425175688718311094199124038263918210739016621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fd2f494c512f34e10b668aea4721c065550d038
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexlabel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef59ee5930000040300483046022100e495eedca5988aaa76a5d23465e9bf3b53e036dbbf3d895f8f294035e8fb98eb022100f31a6a95452de755bcf1b6d3eb668cae15cb5f537406bbcd1baaa193ebffad6900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef59ee5920000040300463044022013d6859404400a5b1ec72f362f89c853c27a72c908e9f4549c00c713c2fc17f002204fb8966a815e5cd5ff8f27561c5b1f5a268613918c8293235532dd0627cc823e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0041547f89c4491f2de05b096ad116e8a0ae0f075816bdcad85c19f2801a0b17b0951c4a901199b9ee75ab0140439f7fe5394b8915efd86c34e6abe91d9cbdbd674be626013c3c7b25676d5fcf13100e1a1540e35f47d41db2c55db56b77d0b95714e88fdcbdf6eb446344fac26f0b71acff5a1f1ff37ff4333b518dcfb63d09446a768e0007f79d0677977f70050b6b5d175ed0e8d1104a278746830cac73cdf5be8bb3d4ddb729c47b474c9421ca7f7f967610262bf7996f7b695f8fca0a98bc1f40566090e98d366c721da5c416ef857155c994c9c26cc65de167dc87a9de7e9f3bf29945ac8b79315ee2ef84adf785b91f0960382d771a7178d179948b7ccf