flexlabel.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b2:38:a4:3e:12:74:23:1a:11:a0:15:98:1e:d2:dd:46:ae was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=flexlabel.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b2:38:a4:3e:12:74:23:1a:11:a0:15:98:1e:d2:dd:46:aeSerial Number (int): 321982408670627986485276016225775551071918
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 5f:d2:f4:94:c5:12:f3:4e:10:b6:68:ae:a4:72:1c:06:55:50:d0:38
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 7e:f9:08:7a:34:49:0c:5d:f6:95:de:94:0d:05:b6:2f:d8:64:f1:4b
Fingerprint (sha256): 02:b8:9b:c7:76:67:10:ba:ba:6e:b6:31:87:36:2b:47:3e:b5:d5:d9:38:2c:ec:7e:bc:d7:5b:87:10:66:aa:1d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate flexlabel.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flexlabel.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flexlabel.com
Other certificates including the domain name flexlabel.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for flexlabel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA7I4pD4SdCMaEaAVmB7S3UauMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTExNDQxMDFaFw0y MDAzMTAxNDQxMDFaMBgxFjAUBgNVBAMTDWZsZXhsYWJlbC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDbOMwGZuuaMMzxnCYa2iiy8CfoOro/2ms4 n+0aVX8CH8GTVZ/ckbBtDeNh9xC/t7DGJv1myqwDKxNdRaKYrMNApaaC4rzLBckT K5Td6PmIRYy+XY9M/9pLaW4RvupiT2QBeizv5a35tqrYoFaBIw/QKXFOxGHK/cMf 3YLzlwW3kNUzEHmpGG12XEG3+/ZkirPSCf7diluh/rLR19PFB4nqV6PGCeWv6pX/ GWHRDx8iC+UN9xMN9jsSSsjh7ATPoPghSex9Gk5thRxCzwPb+OUT4DUSPi8ne6VD SN/dToSK6n7YuLrK0TNIcvVV7jBznggrF0NEyJm7EqXC0GmNUC5pZgxtfMeX9Ah1 YJ9cauZeKWoez63BoyqJQtAJ/cIR2snZWNNKN6YLIoyjqzAguTwJ5Z+XfXHeyOxq 8stEnsn+8L8OyBz0xK6NGQink1sdCLQNtT4rbtYlW+NWDf4eCrDZpah8uYcbs0Vp V7gWCDr+RhXM/gLoPg4G5JH62Y3C6iHr6vADVQH7qupvRvBsoDXWC+NK+mCjSgt6 DH9T4SPY88y3Z9ZBsEiglOmz8JQ9SwAzV/QuSnBjLQ6LZlu4gvMGeUiv8el8xZuL H7WyN8phk6mtsNMHInx2iEwX6I1kDl9ETekPD+FV2gwVV/+JVXo+IkCDc6yhGvXi RevupjMTrQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRf0vSU xRLzThC2aK6kchwGVVDQODAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWZsZXhsYWJlbC5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdwBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW71nuWTAAAE AwBIMEYCIQDkle7cpZiKqnal0jRl6b87U+A22789iV+PKUA16PuY6wIhAPMaapVF LedVvPG20+tmjK4Vy19TdAa7zRuqoZPr/61pAHUAB7dcG+V9aP/xsMYdIxXHuuZX fFeUt2ruvGE6GmnTohwAAAFu9Z7lkgAABAMARjBEAiAT1oWUBEAKWx7HLzYvichT wnpyyQjp9FScAMcTwvwX8AIgT7iWaoFeXNX/jydWHFsfWiaGE5GMgpMjVTLdBifM gj4wDQYJKoZIhvcNAQELBQADggEBAEFUf4nESR8t4FsJatEW6KCuDwdYFr3K2FwZ 8oAaCxewlRxKkBGZue51qwFAQ59/5TlLiRXv2Gw05qvpHZy9vWdL5iYBPDx7JWdt X88TEA4aFUDjX0fUHbLFXbVrd9C5VxToj9y99utEY0T6wm8Lcaz/Wh8f83/0MztR jc+2PQlEanaOAAf3nQZ3l39wBQtrXRde0OjREEonh0aDDKxzzfW+i7PU3bcpxHtH TJQhyn9/lnYQJiv3mW97aV+PygqYvB9AVmCQ6Y02bHIdpcQW74VxVcmUycJsxl3h Z9yHqd5+nzvymUWsi3kxXuLvhK33hbkfCWA4LXcacXjReZSLfM8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2zjMBmbrmjDM8ZwmGtoo svAn6Dq6P9prOJ/tGlV/Ah/Bk1Wf3JGwbQ3jYfcQv7ewxib9ZsqsAysTXUWimKzD QKWmguK8ywXJEyuU3ej5iEWMvl2PTP/aS2luEb7qYk9kAXos7+Wt+baq2KBWgSMP 0ClxTsRhyv3DH92C85cFt5DVMxB5qRhtdlxBt/v2ZIqz0gn+3Ypbof6y0dfTxQeJ 6lejxgnlr+qV/xlh0Q8fIgvlDfcTDfY7EkrI4ewEz6D4IUnsfRpObYUcQs8D2/jl E+A1Ej4vJ3ulQ0jf3U6Eiup+2Li6ytEzSHL1Ve4wc54IKxdDRMiZuxKlwtBpjVAu aWYMbXzHl/QIdWCfXGrmXilqHs+twaMqiULQCf3CEdrJ2VjTSjemCyKMo6swILk8 CeWfl31x3sjsavLLRJ7J/vC/Dsgc9MSujRkIp5NbHQi0DbU+K27WJVvjVg3+Hgqw 2aWofLmHG7NFaVe4Fgg6/kYVzP4C6D4OBuSR+tmNwuoh6+rwA1UB+6rqb0bwbKA1 1gvjSvpgo0oLegx/U+Ej2PPMt2fWQbBIoJTps/CUPUsAM1f0LkpwYy0Oi2ZbuILz BnlIr/HpfMWbix+1sjfKYZOprbDTByJ8dohMF+iNZA5fRE3pDw/hVdoMFVf/iVV6 PiJAg3OsoRr14kXr7qYzE60CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321982408670627986485276016225775551071918 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 14:41:01 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 14:41:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexlabel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 894347173680412089827444549121382640024681041108872210500886940217823442355909409873862589511098947127941901557077260302409530264501630979689186586447541054568141526789845947333509377989250335295159246034232690730595507765308711571618165789688956133663620133013662743713955471278796092859812563007181837322043716438760322862835994135556645057161067051610578344068648173375399557853579324288576391510284895169963167615932601360978914723164004531771552722716335001554905661764575692539758176681016023075197334029012944216598829383214387954568715232435562646299728732916045554797843417858399727122689875093516771178809523828799692235429248979643751118508761171995405114044288750917295710584725768342412014282475584706657947918539944601279087124346859454561944133898170152267375688221322133237191556473913193667860488296352681330079893947654782815107064471395382163736172755424182297788757870952166369906947973312618595976188500964914303394919481097487503456435677074408675995142300118517559883349040012923328312255464082884906772597384494002851932078364531503905018585066213727093520457218625379699587859553691054056674665122902031697910371427922387909512438894136941215959582258810659217509425175688718311094199124038263918210739016621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5fd2f494c512f34e10b668aea4721c065550d038 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexlabel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ef59ee5930000040300483046022100e495eedca5988aaa76a5d23465e9bf3b53e036dbbf3d895f8f294035e8fb98eb022100f31a6a95452de755bcf1b6d3eb668cae15cb5f537406bbcd1baaa193ebffad6900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef59ee5920000040300463044022013d6859404400a5b1ec72f362f89c853c27a72c908e9f4549c00c713c2fc17f002204fb8966a815e5cd5ff8f27561c5b1f5a268613918c8293235532dd0627cc823e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0041547f89c4491f2de05b096ad116e8a0ae0f075816bdcad85c19f2801a0b17b0951c4a901199b9ee75ab0140439f7fe5394b8915efd86c34e6abe91d9cbdbd674be626013c3c7b25676d5fcf13100e1a1540e35f47d41db2c55db56b77d0b95714e88fdcbdf6eb446344fac26f0b71acff5a1f1ff37ff4333b518dcfb63d09446a768e0007f79d0677977f70050b6b5d175ed0e8d1104a278746830cac73cdf5be8bb3d4ddb729c47b474c9421ca7f7f967610262bf7996f7b695f8fca0a98bc1f40566090e98d366c721da5c416ef857155c994c9c26cc65de167dc87a9de7e9f3bf29945ac8b79315ee2ef84adf785b91f0960382d771a7178d179948b7ccf