hjrco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:53:dd:cd:4e:c0:e0:dc:81:2f:c4:4e:f8:b4:e9:77:71:cd was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hjrco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:53:dd:cd:4e:c0:e0:dc:81:2f:c4:4e:f8:b4:e9:77:71:cdSerial Number (int): 289875119654952445958423142214747112829389
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fc:dd:7e:f1:53:64:47:1d:78:6e:c2:0a:be:4d:db:aa:3d:3f:82:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 63:ac:ff:9c:9d:59:45:56:25:22:5f:e1:2c:9b:6f:e6:7a:7b:cd:36
Fingerprint (sha256): 6e:c9:8f:47:71:27:9c:c9:a3:17:9d:6b:26:27:49:2d:c0:c2:3c:c5:c8:d7:f6:8d:97:a7:d5:b4:cb:46:4d:03
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate hjrco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hjrco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hjrco.com
Other certificates including the domain name hjrco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for hjrco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISA1PdzU7A4NyBL8RO+LTpd3HNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwOTI1MDhaFw0y MDAxMTEwOTI1MDhaMBQxEjAQBgNVBAMTCWhqcmNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALBsb94r3hxn/O6omtLEJj7fVawji6962FTtyGzb CZHiU1IGy+/oMLlWGo6PHJ7I3GGQWU3o7uyjxnBCXHl27fBBdAMwT691+dp+e4Ba NWbWoNKNqN9gEqMYD7qNs47rpoAvh1FC2rHZOzF+4Jv0CHeNOFj7Q3ckopCwSles 1QnYxxn/v4yzatEkXogFW2arD5i9Zh+UnozBSoHvsBgmBJYVJHugeNU8xy5iXrKO 4MrTx04VOChTLthU9/VcSmgZQZ5dhDq7fv5AutykjZ5y9rzalBMi5r2u+znOEF/3 g2HHBsUDqPlg1NC9GZhtSaS7DqQU8fRsk9BL5/wmLKIKRetGUKA2gKUM8U6y5M9W eXqAmnsvCzi1cdWGAqO8hy3LYI8YWxaLOlGpWVdTUMe/+YYyxEkxuoV3LaIHq5gw 2JC30dm/QsqUZTWBXrL//bi4Bd7PT0c66WW1hknC57ynenlRsMh99v1scNbB4dTv l8EeULiArHt47xfrdNErZXs2mhAMw2gwZjbmg09XYH5BGS8W1PTpYHpAvFUyhZQM MLshGvz0ly2P64Vx3Ed6sHiXAx3Tx2XZJuOeXCx33dN5a5EfUoL5rInaMvIosFOl iBRRbX6hCtCIXMDhsJv4lrSukdML4ULGzNFN/ZCunYEO14RDoP2vMvPdw75kexMH FUopAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPzdfvFTZEcd eG7CCr5N26o9P4KgMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJaGpyY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA8JWk WfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFtxKZ+HwAABAMARzBFAiEA wyg0oUsJ1qLqFn+weN0ZDFsKT36ZKTAnFS49Ltipti4CIE55DOF17MvwDFdsicWD TXqNNIEE1WZDxp4lpjQ+bUMQAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT Le+LkF4AAAFtxKZ+HwAABAMARjBEAiBjTeKiDrSlghLOQ0L6mbPvprkKQ3aiyF7D fyV11WdNnwIgVR8RXaa35VMvP9+i6aASqJdIvNAoc1s6mySJvSHJW4AwDQYJKoZI hvcNAQELBQADggEBADlNg3vYzXA29uaZpSl99MyyomPzYGsvtxaZ+xExAdbb7I6S QLck/aOwswbOtoNSpgM526+kmL2JltiNbBChss9OewZCSXwWBO7hSA5DsNmPN+t8 remI/wye8RggTw0HUG7fPfItaALiiTj9xyIPv2wMd8VwgWzTpGnkt6f2O3SpDjXv OveqGEaDGEZaVE8QBe6GuFWKXPvKEiG8mNXJRJHPdlGdYk44zsnpiehVD3ttonGx vzdafbJ/57Q4zUuJHlUZ13IHnVRWpk5yxzu9X4pVfRoOqn1r+JIfQqq4GVuX9jZd 8h70Jonp8KShJw2OV8NrA2ILwsTlGdec80fFFZ4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsGxv3iveHGf87qia0sQm Pt9VrCOLr3rYVO3IbNsJkeJTUgbL7+gwuVYajo8cnsjcYZBZTeju7KPGcEJceXbt 8EF0AzBPr3X52n57gFo1Ztag0o2o32ASoxgPuo2zjuumgC+HUULasdk7MX7gm/QI d404WPtDdySikLBKV6zVCdjHGf+/jLNq0SReiAVbZqsPmL1mH5SejMFKge+wGCYE lhUke6B41TzHLmJeso7gytPHThU4KFMu2FT39VxKaBlBnl2EOrt+/kC63KSNnnL2 vNqUEyLmva77Oc4QX/eDYccGxQOo+WDU0L0ZmG1JpLsOpBTx9GyT0Evn/CYsogpF 60ZQoDaApQzxTrLkz1Z5eoCaey8LOLVx1YYCo7yHLctgjxhbFos6UalZV1NQx7/5 hjLESTG6hXctogermDDYkLfR2b9CypRlNYFesv/9uLgF3s9PRzrpZbWGScLnvKd6 eVGwyH32/Wxw1sHh1O+XwR5QuICse3jvF+t00StlezaaEAzDaDBmNuaDT1dgfkEZ LxbU9OlgekC8VTKFlAwwuyEa/PSXLY/rhXHcR3qweJcDHdPHZdkm455cLHfd03lr kR9Sgvmsidoy8iiwU6WIFFFtfqEK0IhcwOGwm/iWtK6R0wvhQsbM0U39kK6dgQ7X hEOg/a8y893DvmR7EwcVSikCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 289875119654952445958423142214747112829389 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:25:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:25:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hjrco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719745419634739509187398215866161374415985302752455610398913090514123495726757902111915522632323666332549680281517356691231630592195466302414100154618567686945680703223179634659412162809852477081896369354302324299350836416900250867199331301141533167594489374561554409479922023441090084374082074760198780591106111396648076007957040752323628258413651371035846901995338991397304408058894092940374875521693802267396026639878210831977976755960725596715607951508319446676459370561922224079308263180824041653024347353570423534316198808900301340219699645143619295791574404655216829107422899932721727928031522619919249970329433317141554394236330236203434362367596710365852138492378758677656285212632301593322352477856902985496879160215404113272200903715312813519710023822266059491308202188860176565300759396388986685042232335277668359858605092125300656648183361932830702080847980493118530946327798192040852722101355544581501639370713763741609669352709495397504395715260181569180609850369987698593305956309626583437353847104160186370040566394359967585250544419554807830625065154211913484670571252779319787218630979145753668297989838204876771298011785237727296305959553727386979736108559271411841662558695476459559538352480433697300133027596841 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fcdd7ef15364471d786ec20abe4ddbaa3d3f82a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjrco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc4a67e1f0000040300473045022100c32834a14b09d6a2ea167fb078dd190c5b0a4f7e99293027152e3d2ed8a9b62e02204e790ce175eccbf00c576c89c5834d7a8d348104d56643c69e25a6343e6d4310007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc4a67e1f00000403004630440220634de2a20eb4a58212ce4342fa99b3efa6b90a4376a2c85ec37f2575d5674d9f0220551f115da6b7e5532f3fdfa2e9a012a89748bcd028735b3a9b2489bd21c95b80 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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