flexlabel.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:df:b7:52:d3:2f:b8:c8:fa:13:3d:04:68:bb:75:15:7a:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flexlabel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:df:b7:52:d3:2f:b8:c8:fa:13:3d:04:68:bb:75:15:7a:ee
Serial Number (int): 337463504393590394969401611504961822489326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ee:db:98:47:0e:e8:02:e7:6a:2b:4d:98:bc:7f:5d:f7:22:a9:0c:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:38:3b:a4:24:4a:7a:fe:60:42:8c:a9:da:1a:6e:6e:8c:af:49:fe
Fingerprint (sha256): 40:ff:25:36:1c:7c:50:93:e0:76:95:3c:6b:9a:98:54:03:a2:a4:5d:8a:5a:3c:bb:25:55:42:69:41:9e:25:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flexlabel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flexlabel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flexlabel.com

Other certificates including the domain name flexlabel.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for flexlabel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA9+3UtMvuMj6Ez0EaLt1FXruMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTEwNDI4NDBaFw0y
MDA1MTEwNDI4NDBaMBgxFjAUBgNVBAMTDWZsZXhsYWJlbC5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQC+36cKVvGgMVpwgbZL5DSod7y/TmfQwnRi
mdY3OsSCbuBN1YNIhOGHuNNTOLDHxTJEwmDXAcISt0tYOBl4Eqy0nc2ehp6mNQv/
hv+I2HDQaIqA8KVv/p9Ua6Us6GXEhDvIPS6KOUb84hl8o7Sz7uHVB8GU+LL5YuI0
P1zl++rPa8hEdROAPpiKRDFG5EBsXjvY5tOVP4dVzJoVOFFHHH3uz4ILRhMmwHCG
eDpJgTdhCDFt5RFxeKUf8vXA4NbqU4FQozeXjZRA5eGXv63rFjYrTXCIDMUQYlum
wzcPnWJnTE4wU3lcvcjErEkBQa/yVytSNGoa0BIuwwNOuPG+QebFIGnmT3KblwL/
juuvon65N2ClFm6H5qRjGbKnjzOdBBFO7k7HtfLm51revm7BrXWKAtOO5p79A6ut
3qemVXdcYoTpWhqJ8yVGNzR9p/14yIaZX7wY1MrRfdNH38KSo6gn8htLa5YS4sTX
nkwUggVl9D6KjyvOlHbOSH7jcnnOGr0SAXhpTu99uzmU7ZRPMhPopxjjkp0yOAVV
HD51mXf1ph5lhUNB2EtOSlSxWXlxTp43WQw6+UUErfX2SuZ1fNMz5FpttEYNRIpC
+77Z06TKVdzA2yjdMj+3xv4tX3dpO+aihxiQ53bs4V70nbq++QESS9ZYMb0DYGTh
cUEukzNnLQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTu25hH
DugC52orTZi8f133IqkM5DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWZsZXhsYWJlbC5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAyuI0PAAAE
AwBGMEQCIF4AuZGdsP8GsJSNds9nbDNvmaJfuqp0R5Ut+9CSCGVqAiBbwRtz4wOD
PnKI+7OHbZ/1X+pBMYz7vZa9I1KIyNvNVgB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ
AsEAKQaNsgiaN9kTAAABcDK4jTsAAAQDAEcwRQIgeGPkNCMh+GhfEvEoODF/+9qf
Q2hdO9+QE3sPBo+x1kQCIQDDCZxCUd4Ff8X8QjPXbeR2i/j+KZgt+pGCfICogRST
9TANBgkqhkiG9w0BAQsFAAOCAQEAdsDEcASgIFXh7yeANGPY9oBCKkePF2ElRI3K
FvbdV536ankE3qqtxQywNhdz4DgqFljMT8wzNJq8m3M0qBfzq7LoRISTjlfwX/KO
us7Gic6uCv9tGS703Nt1pSjjMVFIqM4yo+XrHn24TmEVLXSPzNFKG72ZW6VjQ9Kh
iKay3Q0Y+VJsWJb1o0CV8VgIxCdEmYimG5KTr9p+BltlSenWmVaPl1aZXcafhVD4
jrnvWqZzAEMnYBqfWr4VcTNj0aL4nkSvuTl5bTa1c96Jkw6l1XGJi00C2xz5Pq7S
Mmgw8QMfnnEeu5TiWYSrBtnicowrSlnlp8wb3hTbCcH19vPbRg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337463504393590394969401611504961822489326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 04:28:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 04:28:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexlabel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778696523709466837144504919323608308822476126657806595924054981549888420852741948561124721729800161899938464642161234310940665061799789632114092297762204726625196964577687810177181703507271856960035248603358611241926114923596501574233747206287148833134767328298752500677538297404213282615080417745701702753165601672064199384983978045748485867200290283350255856218603514768284534893617746752652377275505792872490918483749853549870263466284000271774049137182227478072374183400582479024057408275532032244967369672690109495150052116170876249181688681606927097154381785179105201748542050478000114098122629010165634826535468207936500638023021869979920842110174220788069681532106611586833233192786854206019105692287992589819107328151879900990359606252483607977994471556031535147552751746493398520479978770983620315917720123210569270751935230860249582991832620550605994505703020452181578201748161356619807171757974423964390396535423667187503270017078366521326754737498014915901742469298232583473399818128463176848233290064246671483284193888610749402740385890692930127012208955485998876134258137848269586530856950853586852096465483192564140376290314018819604248046527301272644946626706702607377182447483884526070500011475519185413178104440621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eedb98470ee802e76a2b4d98bc7f5df722a90ce4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexlabel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017032b88d0f000004030046304402205e00b9919db0ff06b0948d76cf676c336f99a25fbaaa7447952dfbd09208656a02205bc11b73e303833e7288fbb3876d9ff55fea41318cfbbd96bd235288c8dbcd560076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017032b88d3b000004030047304502207863e4342321f8685f12f12838317ffbda9f43685d3bdf90137b0f068fb1d644022100c3099c4251de057fc5fc4233d76de4768bf8fe29982dfa91827c80a8811493f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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