lajollacoast.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:27:85:16:9c:2e:01:ff:a2:85:69:8b:11:d3:ac:9b:76:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lajollacoast.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:27:85:16:9c:2e:01:ff:a2:85:69:8b:11:d3:ac:9b:76:8e
Serial Number (int): 361897060758628880412766202829171106477710
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:52:49:78:07:5f:45:7d:c0:ce:3e:c9:a0:4e:0d:3d:37:0c:cf:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:c6:55:fa:c3:ce:07:03:f4:41:2a:cd:fe:b9:5f:07:82:2e:e4:9a
Fingerprint (sha256): 6a:1e:c2:25:aa:ff:c3:89:13:e4:ed:2f:a7:07:57:9d:b8:13:45:e5:fa:30:49:35:0e:75:37:5a:79:57:eb:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lajollacoast.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lajollacoast.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lajollacoast.com

Other certificates including the domain name lajollacoast.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lajollacoast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361897060758628880412766202829171106477710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 20:08:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 20:08:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajollacoast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803182396827819686997064266425911036600722169808284528582722480714484774304608846215247703447413019322961302023209534550659238780206023211163118906187728973327215196983722153022798739032229352437198824724897346684056113248539487603232638567325315018342077498741043304893401536907685169759553773053026086484926330863024997828764399138149894467542174542685877509061158988248330419358679937756438334587712192349060432931674998993428772521939520121302821245514141239565741365539307652400390273443876836095083200200665155645635866930055547214944952137111224043359141944848089738123291184859470246015956205520068952065545175776634314627286037559670353871841663454299710298535513003111335268130540310353260258124524196307892055083156525254726025825290999337934320111657053430434424515430514616755125633906531351567395682231835105091289554348309130442827375755074975634896389853934784547088840938141667295475905078615918270510611304255100694094648938984229805612123185000631533554872620822202394598930737014358610942532003349062066811308978012562626135288975655686510322533139300534032481638810915046404718412263921268026022141600877263152948904333889980706201640633636240468601974310514162941389311907392447819929504080058009689506942354021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b524978075f457dc0ce3ec9a04e0d3d370ccf0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollacoast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ef6caeaa90000040300483046022100c9c090c2992d7890ed826802f3737708ee7911153bbd864b88464283c42af09c022100b532ab89cc4b5e59302bb4106b537dfc233ef109cb249aeb4d256527992d65bc0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ef6caeac00000040300463044022008344f0f857d24427c0ae97878f8d411edc899b46e78ff12203e48343fa9badd02202e9c0de5839567bfc28ca68685a7f7422dc1cceec26da55c7df1fb86a6a383df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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