www.flexdrink.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:43:a5:28:4b:4a:99:ac:ce:9e:33:42:e7:28:3b:0d:7d:62 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.flexdrink.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:43:a5:28:4b:4a:99:ac:ce:9e:33:42:e7:28:3b:0d:7d:62Serial Number (int): 284355308217253633921452323683622317817186
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: fb:77:b5:f3:39:64:17:2c:4e:90:5f:0c:9a:ca:89:cd:ea:46:a0:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c0:e9:6d:c6:51:ff:b2:18:74:dc:33:b3:20:e0:b0:35:6c:a6:b7:2e
Fingerprint (sha256): 81:ee:8e:af:3f:b8:dc:e7:85:a5:7d:54:46:29:27:4f:ec:28:a3:7f:5e:d0:d6:f1:c2:82:2e:a8:b4:08:d2:7a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.flexdrink.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.flexdrink.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.flexdrink.com
Other certificates including the domain name flexdrink.com
(limited to 100 certificates)
www.floraphresh.com
ireallydontcare.com
www.jointpainohio.com
www.flexdrink.com
sushi-chef.com
flexdrink.com
fiorenzuoladarda.org
flexdrink.com
www.flexdrink.com
296.me
www.bionmn.com
flexdrink.com
flexdrink.com
www.flexdrink.com
www.palmspringsstemcell.com
springtideresearchinstitute.com
flexdrink.com
ireallydontcare.com
www.jointpainohio.com
www.flexdrink.com
sushi-chef.com
flexdrink.com
fiorenzuoladarda.org
flexdrink.com
www.flexdrink.com
296.me
www.bionmn.com
flexdrink.com
flexdrink.com
www.flexdrink.com
www.palmspringsstemcell.com
springtideresearchinstitute.com
flexdrink.com
Certificate
The complete raw certificate details for www.flexdrink.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISA0OlKEtKmazOnjNC5yg7DX1iMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTgxNTI0MTBaFw0y MDAzMTcxNTI0MTBaMBwxGjAYBgNVBAMTEXd3dy5mbGV4ZHJpbmsuY29tMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp4ZlViyG5eQ5DvjPnE6Vfagg6O3Y ydYoWr63RoSQnZH3d+udtJ26hLTPBRxRUX0G2oA3WFR5CpxhdKhZo9LBzFwzf3u5 GGIqEu74GZ0we6CTuK5+dyrn3xyf8RP3oKmWnWPbexlVi0WSMHrcbsH90bjx/nPm Ih5Vr7TDrTB/o2C3ZR8KJ+C5g5UpkFYi5pdW2ieCiyXClfPQv+I3BimCha0r9d9c D62uxODWKuasR6BHKaE+cSbmmRbVU6EwF0AsYnOLZrTxmNcuxOWS+Ds8GHxzt4mw QJNIs0izHG3febwdLzg+b2w4E/9DCMOhlxYF78fdTOwZoCW4OWnARzR8oF7g/PGU KMg+1yu+MlqL2YCWWa05YsziHozpu/9lDf7f0jCJkf0hW4pwsRvprt70ux6OPe+R 0eujPtn4DmE6P2Ch2NawUoBoXh8T/nbLfrMmhW78Aq+Oe+sDxbRMUpi+R6IFAZrH QjESAzwDGubYQnyTTaNVNi8+yrVigAzqPwYdtkuaRT8LPKfhc86B02xTV1h8KamS 38kZjfDfDibvinokgLvJlAbEHbJbun+Hb8AHP26P4ImVz+Y1X77KgPR9xZUzWHl3 A2jrWlTMm9PUobzt8bvf6T90GbSKhxDwEeSism+3AGwFqPo5sjC2t7FbzvxTKyhe SZJ3mJ6N3DZK+GsCAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU +3e18zlkFyxOkF8MmsqJzepGoM4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cuZmxleGRyaW5r LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC BAIEgfYEgfMA8QB3APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAAB bxnS6PgAAAQDAEgwRgIhAJk85k/CTgtoWGqYRGTkfGh6msLM9bUuLNOK/QM3bB6N AiEAxSAOeCk16aEb2mTzKF07+Dr1HMB8MNIkbDJ9blePERYAdgAHt1wb5X1o//Gw xh0jFce65ld8V5S3au68YToaadOiHAAAAW8Z0uoVAAAEAwBHMEUCIQCtCJyh7rNC FY8qQFtvBpkpgCyH5o/jcKpRLZ4FMQMYFQIgXP2lPChATpjT71HMCbHRyb/93sWo 5W9NbcAvYZ8jRdowDQYJKoZIhvcNAQELBQADggEBAEJPbZq8NSztYqZ3d8tim7tN Y1HbfHElWpGWOjZoorCIJ+giG9lfzFCXASr4TswEXQGruZYQNixR442bGCj7mvf+ k8OyezweUfLAWocael/x2Jq2AG4q/sawLjFCHe7qDRiwQeegKj5d6PBY/oatsCrg dVkQdpqRqKeBxWXebm4yAJEY7+itjq0YzZlFDd4T5YaU0FCdlJFj99Q+5HV6SOYC 6ts5YmSIoR3YIQkUKaLzHD2WpPQppi11PpXmQL6DwhhEpfUu0UjXWVqlz9soqEUF CU+EXtJpqD4AY5FC5W1GIx82oA4STI9/syyKKVN0alOdfJnaSSLVRp9v2zyiI0M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAp4ZlViyG5eQ5DvjPnE6V fagg6O3YydYoWr63RoSQnZH3d+udtJ26hLTPBRxRUX0G2oA3WFR5CpxhdKhZo9LB zFwzf3u5GGIqEu74GZ0we6CTuK5+dyrn3xyf8RP3oKmWnWPbexlVi0WSMHrcbsH9 0bjx/nPmIh5Vr7TDrTB/o2C3ZR8KJ+C5g5UpkFYi5pdW2ieCiyXClfPQv+I3BimC ha0r9d9cD62uxODWKuasR6BHKaE+cSbmmRbVU6EwF0AsYnOLZrTxmNcuxOWS+Ds8 GHxzt4mwQJNIs0izHG3febwdLzg+b2w4E/9DCMOhlxYF78fdTOwZoCW4OWnARzR8 oF7g/PGUKMg+1yu+MlqL2YCWWa05YsziHozpu/9lDf7f0jCJkf0hW4pwsRvprt70 ux6OPe+R0eujPtn4DmE6P2Ch2NawUoBoXh8T/nbLfrMmhW78Aq+Oe+sDxbRMUpi+ R6IFAZrHQjESAzwDGubYQnyTTaNVNi8+yrVigAzqPwYdtkuaRT8LPKfhc86B02xT V1h8KamS38kZjfDfDibvinokgLvJlAbEHbJbun+Hb8AHP26P4ImVz+Y1X77KgPR9 xZUzWHl3A2jrWlTMm9PUobzt8bvf6T90GbSKhxDwEeSism+3AGwFqPo5sjC2t7Fb zvxTKyheSZJ3mJ6N3DZK+GsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 284355308217253633921452323683622317817186 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 15:24:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-17 15:24:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.flexdrink.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 683442306299020064613655368133910345338523691240010912876786316978108271183099493038333155397462099151485449241453063583040101248294801660955079565469267312093950402636749131897115175116925342684733931449255829921754380653066733501036503080007013348084248725058519108582714982198460833982829179354580847627663109116150557604899719526837593934542061481643607627177472813389262992846244587641942269059693478930288521349183645264068554160700074652502282545198545563591951866035504312948836106407450918662878327699349888092206085772846555556976732502811298040854861056995192311641390894519806466140467054563132175034123969136968747189012449213728249314463939299242723431280542016068736023943761035258749000121439051641695560674656562093282813778092474904679518715354180981655395650416191365170127271004407406899793531551210545561108574348589049886204331983658414624479719453148781090713361851119009851819820221146152592739793483476848282723181856695406210748291104639644512858907449579890752410970634237757888128152478318622078819991805054395539061961902867117721561286836317248869513755248921791099161129999666054304103895319873220816277821274289653853280139115633629110221093958680036696647989857583587130518692821222449744334782396523 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fb77b5f33964172c4e905f0c9aca89cdea46a0ce . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexdrink.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f19d2e8f80000040300483046022100993ce64fc24e0b68586a984464e47c687a9ac2ccf5b52e2cd38afd03376c1e8d022100c5200e782935e9a11bda64f3285d3bf83af51cc07c30d2246c327d6e578f111600760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f19d2ea150000040300473045022100ad089ca1eeb342158f2a405b6f069929802c87e68fe370aa512d9e053103181502205cfda53c28404e98d3ef51cc09b1d1c9bffddec5a8e56f4d6dc02f619f2345da . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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