lajollainvestments.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:b0:4c:98:4d:f1:f1:1e:80:57:ce:b7:e6:7f:b4:38:29 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lajollainvestments.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:b0:4c:98:4d:f1:f1:1e:80:57:ce:b7:e6:7f:b4:38:29
Serial Number (int): 336093037981887362930061810541615736174633
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:6c:f9:73:28:05:0d:fe:aa:de:5f:be:3b:cd:22:38:a9:e5:02:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:be:d6:dc:ec:f2:42:10:3d:ec:0a:72:28:a1:55:f9:e6:89:3a:a5
Fingerprint (sha256): 15:0b:4a:01:8d:7d:93:5f:21:75:8b:d3:23:df:ab:67:65:99:ba:6c:ac:58:1a:b6:40:76:22:46:24:3f:0d:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lajollainvestments.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lajollainvestments.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lajollainvestments.com

Other certificates including the domain name lajollainvestments.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lajollainvestments.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336093037981887362930061810541615736174633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 01:56:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 01:56:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajollainvestments.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 948481642966659525426426897190338828056895058720604368399358472469424845797303683865317444576377961512305469865686287635569768802398546253190051412943930328362995791483799755394278519408375634908532034729006513218689508512921771471705285164981592125034487715456783781251525403338668992076591485286564496523616886846439740363537940723778452679975454771015277636844458347973539647675023740258989262060298630745954299583620273443825286273621316941149018929381170577271244208170742126292096337059186911479047918378739734166074370570007089945030398437893083563924850034343179375714614152754727821601875641202307523908470321434879603087193910645391995391374591489384309679461196750777513364123358596372901057205459033392126069271925998433214333553590767503745291587177249463635916538567764100241409215762110178871455054736087531908999288360782996725171850348288296146369511314975982668290030862791009006764298510951499789561491592580488411787031428938518840916837552302843694941847442451486387664873165902679111680112304412144754986158336320550720180725920904789563220690584204773706360852817156320096539981617461250617124457011219045075059824125371692389499921711563164961104164184516553801960532325653734368418302661968189206695070431657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa6cf97328050dfeaade5fbe3bcd2238a9e5025d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollainvestments.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbde5cb02000004030046304402200e6fedfde7870be899035c46d7f64d5b5003b7b8740c9b7f2dd238b4cf9ff0e90220145031549dbf6da926e81479e72741f0930b324b035a299f3769dbf9a6cc888d0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbde5cd0c0000040300463044022058a1b1408d59cb9f46cf5f9bc5a39c4e7938fb08b7f79f6ee6cba19ea398e9ff0220209c325213777664011718c18715e038314cc8b0fae00691b02201e36b7440ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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