hjrco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:dd:cd:4e:c0:e0:dc:81:2f:c4:4e:f8:b4:e9:77:71:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hjrco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:dd:cd:4e:c0:e0:dc:81:2f:c4:4e:f8:b4:e9:77:71:cd
Serial Number (int): 289875119654952445958423142214747112829389
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:dd:7e:f1:53:64:47:1d:78:6e:c2:0a:be:4d:db:aa:3d:3f:82:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 63:ac:ff:9c:9d:59:45:56:25:22:5f:e1:2c:9b:6f:e6:7a:7b:cd:36
Fingerprint (sha256): 6e:c9:8f:47:71:27:9c:c9:a3:17:9d:6b:26:27:49:2d:c0:c2:3c:c5:c8:d7:f6:8d:97:a7:d5:b4:cb:46:4d:03

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hjrco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hjrco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hjrco.com

Other certificates including the domain name hjrco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hjrco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgISA1PdzU7A4NyBL8RO+LTpd3HNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwOTI1MDhaFw0y
MDAxMTEwOTI1MDhaMBQxEjAQBgNVBAMTCWhqcmNvLmNvbTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBALBsb94r3hxn/O6omtLEJj7fVawji6962FTtyGzb
CZHiU1IGy+/oMLlWGo6PHJ7I3GGQWU3o7uyjxnBCXHl27fBBdAMwT691+dp+e4Ba
NWbWoNKNqN9gEqMYD7qNs47rpoAvh1FC2rHZOzF+4Jv0CHeNOFj7Q3ckopCwSles
1QnYxxn/v4yzatEkXogFW2arD5i9Zh+UnozBSoHvsBgmBJYVJHugeNU8xy5iXrKO
4MrTx04VOChTLthU9/VcSmgZQZ5dhDq7fv5AutykjZ5y9rzalBMi5r2u+znOEF/3
g2HHBsUDqPlg1NC9GZhtSaS7DqQU8fRsk9BL5/wmLKIKRetGUKA2gKUM8U6y5M9W
eXqAmnsvCzi1cdWGAqO8hy3LYI8YWxaLOlGpWVdTUMe/+YYyxEkxuoV3LaIHq5gw
2JC30dm/QsqUZTWBXrL//bi4Bd7PT0c66WW1hknC57ynenlRsMh99v1scNbB4dTv
l8EeULiArHt47xfrdNErZXs2mhAMw2gwZjbmg09XYH5BGS8W1PTpYHpAvFUyhZQM
MLshGvz0ly2P64Vx3Ed6sHiXAx3Tx2XZJuOeXCx33dN5a5EfUoL5rInaMvIosFOl
iBRRbX6hCtCIXMDhsJv4lrSukdML4ULGzNFN/ZCunYEO14RDoP2vMvPdw75kexMH
FUopAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPzdfvFTZEcd
eG7CCr5N26o9P4KgMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJaGpyY28uY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA8JWk
WfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFtxKZ+HwAABAMARzBFAiEA
wyg0oUsJ1qLqFn+weN0ZDFsKT36ZKTAnFS49Ltipti4CIE55DOF17MvwDFdsicWD
TXqNNIEE1WZDxp4lpjQ+bUMQAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT
Le+LkF4AAAFtxKZ+HwAABAMARjBEAiBjTeKiDrSlghLOQ0L6mbPvprkKQ3aiyF7D
fyV11WdNnwIgVR8RXaa35VMvP9+i6aASqJdIvNAoc1s6mySJvSHJW4AwDQYJKoZI
hvcNAQELBQADggEBADlNg3vYzXA29uaZpSl99MyyomPzYGsvtxaZ+xExAdbb7I6S
QLck/aOwswbOtoNSpgM526+kmL2JltiNbBChss9OewZCSXwWBO7hSA5DsNmPN+t8
remI/wye8RggTw0HUG7fPfItaALiiTj9xyIPv2wMd8VwgWzTpGnkt6f2O3SpDjXv
OveqGEaDGEZaVE8QBe6GuFWKXPvKEiG8mNXJRJHPdlGdYk44zsnpiehVD3ttonGx
vzdafbJ/57Q4zUuJHlUZ13IHnVRWpk5yxzu9X4pVfRoOqn1r+JIfQqq4GVuX9jZd
8h70Jonp8KShJw2OV8NrA2ILwsTlGdec80fFFZ4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAsGxv3iveHGf87qia0sQm
Pt9VrCOLr3rYVO3IbNsJkeJTUgbL7+gwuVYajo8cnsjcYZBZTeju7KPGcEJceXbt
8EF0AzBPr3X52n57gFo1Ztag0o2o32ASoxgPuo2zjuumgC+HUULasdk7MX7gm/QI
d404WPtDdySikLBKV6zVCdjHGf+/jLNq0SReiAVbZqsPmL1mH5SejMFKge+wGCYE
lhUke6B41TzHLmJeso7gytPHThU4KFMu2FT39VxKaBlBnl2EOrt+/kC63KSNnnL2
vNqUEyLmva77Oc4QX/eDYccGxQOo+WDU0L0ZmG1JpLsOpBTx9GyT0Evn/CYsogpF
60ZQoDaApQzxTrLkz1Z5eoCaey8LOLVx1YYCo7yHLctgjxhbFos6UalZV1NQx7/5
hjLESTG6hXctogermDDYkLfR2b9CypRlNYFesv/9uLgF3s9PRzrpZbWGScLnvKd6
eVGwyH32/Wxw1sHh1O+XwR5QuICse3jvF+t00StlezaaEAzDaDBmNuaDT1dgfkEZ
LxbU9OlgekC8VTKFlAwwuyEa/PSXLY/rhXHcR3qweJcDHdPHZdkm455cLHfd03lr
kR9Sgvmsidoy8iiwU6WIFFFtfqEK0IhcwOGwm/iWtK6R0wvhQsbM0U39kK6dgQ7X
hEOg/a8y893DvmR7EwcVSikCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289875119654952445958423142214747112829389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:25:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:25:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hjrco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719745419634739509187398215866161374415985302752455610398913090514123495726757902111915522632323666332549680281517356691231630592195466302414100154618567686945680703223179634659412162809852477081896369354302324299350836416900250867199331301141533167594489374561554409479922023441090084374082074760198780591106111396648076007957040752323628258413651371035846901995338991397304408058894092940374875521693802267396026639878210831977976755960725596715607951508319446676459370561922224079308263180824041653024347353570423534316198808900301340219699645143619295791574404655216829107422899932721727928031522619919249970329433317141554394236330236203434362367596710365852138492378758677656285212632301593322352477856902985496879160215404113272200903715312813519710023822266059491308202188860176565300759396388986685042232335277668359858605092125300656648183361932830702080847980493118530946327798192040852722101355544581501639370713763741609669352709495397504395715260181569180609850369987698593305956309626583437353847104160186370040566394359967585250544419554807830625065154211913484670571252779319787218630979145753668297989838204876771298011785237727296305959553727386979736108559271411841662558695476459559538352480433697300133027596841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcdd7ef15364471d786ec20abe4ddbaa3d3f82a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjrco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dc4a67e1f0000040300473045022100c32834a14b09d6a2ea167fb078dd190c5b0a4f7e99293027152e3d2ed8a9b62e02204e790ce175eccbf00c576c89c5834d7a8d348104d56643c69e25a6343e6d4310007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc4a67e1f00000403004630440220634de2a20eb4a58212ce4342fa99b3efa6b90a4376a2c85ec37f2575d5674d9f0220551f115da6b7e5532f3fdfa2e9a012a89748bcd028735b3a9b2489bd21c95b80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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