flexlabel.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:df:b7:52:d3:2f:b8:c8:fa:13:3d:04:68:bb:75:15:7a:ee was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=flexlabel.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:df:b7:52:d3:2f:b8:c8:fa:13:3d:04:68:bb:75:15:7a:eeSerial Number (int): 337463504393590394969401611504961822489326
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ee:db:98:47:0e:e8:02:e7:6a:2b:4d:98:bc:7f:5d:f7:22:a9:0c:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 44:38:3b:a4:24:4a:7a:fe:60:42:8c:a9:da:1a:6e:6e:8c:af:49:fe
Fingerprint (sha256): 40:ff:25:36:1c:7c:50:93:e0:76:95:3c:6b:9a:98:54:03:a2:a4:5d:8a:5a:3c:bb:25:55:42:69:41:9e:25:74
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate flexlabel.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flexlabel.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flexlabel.com
Other certificates including the domain name flexlabel.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for flexlabel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISA9+3UtMvuMj6Ez0EaLt1FXruMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTEwNDI4NDBaFw0y MDA1MTEwNDI4NDBaMBgxFjAUBgNVBAMTDWZsZXhsYWJlbC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC+36cKVvGgMVpwgbZL5DSod7y/TmfQwnRi mdY3OsSCbuBN1YNIhOGHuNNTOLDHxTJEwmDXAcISt0tYOBl4Eqy0nc2ehp6mNQv/ hv+I2HDQaIqA8KVv/p9Ua6Us6GXEhDvIPS6KOUb84hl8o7Sz7uHVB8GU+LL5YuI0 P1zl++rPa8hEdROAPpiKRDFG5EBsXjvY5tOVP4dVzJoVOFFHHH3uz4ILRhMmwHCG eDpJgTdhCDFt5RFxeKUf8vXA4NbqU4FQozeXjZRA5eGXv63rFjYrTXCIDMUQYlum wzcPnWJnTE4wU3lcvcjErEkBQa/yVytSNGoa0BIuwwNOuPG+QebFIGnmT3KblwL/ juuvon65N2ClFm6H5qRjGbKnjzOdBBFO7k7HtfLm51revm7BrXWKAtOO5p79A6ut 3qemVXdcYoTpWhqJ8yVGNzR9p/14yIaZX7wY1MrRfdNH38KSo6gn8htLa5YS4sTX nkwUggVl9D6KjyvOlHbOSH7jcnnOGr0SAXhpTu99uzmU7ZRPMhPopxjjkp0yOAVV HD51mXf1ph5lhUNB2EtOSlSxWXlxTp43WQw6+UUErfX2SuZ1fNMz5FpttEYNRIpC +77Z06TKVdzA2yjdMj+3xv4tX3dpO+aihxiQ53bs4V70nbq++QESS9ZYMb0DYGTh cUEukzNnLQIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTu25hH DugC52orTZi8f133IqkM5DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWZsZXhsYWJlbC5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAXAyuI0PAAAE AwBGMEQCIF4AuZGdsP8GsJSNds9nbDNvmaJfuqp0R5Ut+9CSCGVqAiBbwRtz4wOD PnKI+7OHbZ/1X+pBMYz7vZa9I1KIyNvNVgB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZ AsEAKQaNsgiaN9kTAAABcDK4jTsAAAQDAEcwRQIgeGPkNCMh+GhfEvEoODF/+9qf Q2hdO9+QE3sPBo+x1kQCIQDDCZxCUd4Ff8X8QjPXbeR2i/j+KZgt+pGCfICogRST 9TANBgkqhkiG9w0BAQsFAAOCAQEAdsDEcASgIFXh7yeANGPY9oBCKkePF2ElRI3K FvbdV536ankE3qqtxQywNhdz4DgqFljMT8wzNJq8m3M0qBfzq7LoRISTjlfwX/KO us7Gic6uCv9tGS703Nt1pSjjMVFIqM4yo+XrHn24TmEVLXSPzNFKG72ZW6VjQ9Kh iKay3Q0Y+VJsWJb1o0CV8VgIxCdEmYimG5KTr9p+BltlSenWmVaPl1aZXcafhVD4 jrnvWqZzAEMnYBqfWr4VcTNj0aL4nkSvuTl5bTa1c96Jkw6l1XGJi00C2xz5Pq7S Mmgw8QMfnnEeu5TiWYSrBtnicowrSlnlp8wb3hTbCcH19vPbRg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvt+nClbxoDFacIG2S+Q0 qHe8v05n0MJ0YpnWNzrEgm7gTdWDSIThh7jTUziwx8UyRMJg1wHCErdLWDgZeBKs tJ3NnoaepjUL/4b/iNhw0GiKgPClb/6fVGulLOhlxIQ7yD0uijlG/OIZfKO0s+7h 1QfBlPiy+WLiND9c5fvqz2vIRHUTgD6YikQxRuRAbF472ObTlT+HVcyaFThRRxx9 7s+CC0YTJsBwhng6SYE3YQgxbeURcXilH/L1wODW6lOBUKM3l42UQOXhl7+t6xY2 K01wiAzFEGJbpsM3D51iZ0xOMFN5XL3IxKxJAUGv8lcrUjRqGtASLsMDTrjxvkHm xSBp5k9ym5cC/47rr6J+uTdgpRZuh+akYxmyp48znQQRTu5Ox7Xy5uda3r5uwa11 igLTjuae/QOrrd6nplV3XGKE6VoaifMlRjc0faf9eMiGmV+8GNTK0X3TR9/CkqOo J/IbS2uWEuLE155MFIIFZfQ+io8rzpR2zkh+43J5zhq9EgF4aU7vfbs5lO2UTzIT 6KcY45KdMjgFVRw+dZl39aYeZYVDQdhLTkpUsVl5cU6eN1kMOvlFBK319krmdXzT M+RabbRGDUSKQvu+2dOkylXcwNso3TI/t8b+LV93aTvmoocYkOd27OFe9J26vvkB EkvWWDG9A2Bk4XFBLpMzZy0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337463504393590394969401611504961822489326 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 04:28:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-11 04:28:40 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexlabel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778696523709466837144504919323608308822476126657806595924054981549888420852741948561124721729800161899938464642161234310940665061799789632114092297762204726625196964577687810177181703507271856960035248603358611241926114923596501574233747206287148833134767328298752500677538297404213282615080417745701702753165601672064199384983978045748485867200290283350255856218603514768284534893617746752652377275505792872490918483749853549870263466284000271774049137182227478072374183400582479024057408275532032244967369672690109495150052116170876249181688681606927097154381785179105201748542050478000114098122629010165634826535468207936500638023021869979920842110174220788069681532106611586833233192786854206019105692287992589819107328151879900990359606252483607977994471556031535147552751746493398520479978770983620315917720123210569270751935230860249582991832620550605994505703020452181578201748161356619807171757974423964390396535423667187503270017078366521326754737498014915901742469298232583473399818128463176848233290064246671483284193888610749402740385890692930127012208955485998876134258137848269586530856950853586852096465483192564140376290314018819604248046527301272644946626706702607377182447483884526070500011475519185413178104440621 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eedb98470ee802e76a2b4d98bc7f5df722a90ce4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexlabel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017032b88d0f000004030046304402205e00b9919db0ff06b0948d76cf676c336f99a25fbaaa7447952dfbd09208656a02205bc11b73e303833e7288fbb3876d9ff55fea41318cfbbd96bd235288c8dbcd560076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017032b88d3b000004030047304502207863e4342321f8685f12f12838317ffbda9f43685d3bdf90137b0f068fb1d644022100c3099c4251de057fc5fc4233d76de4768bf8fe29982dfa91827c80a8811493f5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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