www.flavia.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:bd:44:7c:d6:06:58:04:1a:a4:be:bf:3f:3d:e4:b1:dd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.flavia.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:bd:44:7c:d6:06:58:04:1a:a4:be:bf:3f:3d:e4:b1:dd
Serial Number (int): 262269002228487927280827714716203349225949
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a5:60:21:d3:3a:0e:36:e6:9d:dc:1d:18:06:a9:c2:18:4d:b6:4a:90
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:ad:e7:7f:d7:f2:ac:c3:b0:79:8f:94:bf:f3:56:2c:9a:a2:73:32
Fingerprint (sha256): 6a:84:60:e4:b2:1b:8a:a2:5b:30:83:ba:5b:a2:d1:81:95:f8:80:75:b1:32:90:42:8e:1a:91:9e:db:01:9f:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.flavia.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.flavia.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.flavia.co

Other certificates including the domain name flavia.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.flavia.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262269002228487927280827714716203349225949
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 21:19:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 21:19:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.flavia.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694849554854566187068273289944622482050498603593681816296529685638401347223887343019339280069938445646306716601570939384627420591485844967041792077194824452528291772349097211892635841318739419309629490712945781181043845548058762467161121511948366112370447005312337604261390106911016648630800761405013925805258478271382264744094096460111534695800477657617701410217816176186592245124606329229432069826206363179718056397520163013616571914490575913177660523545072982780126678447028715410532404075965817778810445303209386253186922825587156336450275366294829824667799706041037058220421661540542169443314490316776711818396761181485077166936164326429991070781250842682435803778219371713032397467195809003154051440020013053464454003803127332447697989051631156947938088872147983172802632262235479745292862104581174316951999625412973168084731279874981433714311027208596593166436323809082756000718932907857749857992951485209980179110022039176810727057702353456319162564345172256392372259778076228309941440215119426806179411768312409773547695555469943762497597193269169619734640827556704386397582441881573889020084067383802518088219017771960467033985169270088358528521716494048637150940181463131058260951085759296046424599278803108284255250756467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a56021d33a0e36e69ddc1d1806a9c2184db64a90
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flavia.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3aaab9c40000040300473045022100c02baa55b0f21daacf0a40f4fc8967bb20ab303f1dd38c97971a3dff0f89ccbf0220398fc0230cca395cf7a2a912ef83e93f78fa5247422bfd1a7bc47b02761ad84e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3aaab9e20000040300473045022002fc29b155c316e83b699483d1a4f19beb06801e5ef0a8f1acfb28e56a248cc3022100c21e63383664d229357fdf61b87682c02075728185190ab6a275258d88f7650d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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