www.southerncalifornia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:1b:77:da:55:12:bd:7d:2a:59:2e:e4:27:e3:d1:63:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.southerncalifornia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:1b:77:da:55:12:bd:7d:2a:59:2e:e4:27:e3:d1:63:a0
Serial Number (int): 304589229861757770390786783997606111568800
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c4:34:d5:c1:07:92:b0:45:92:5a:83:02:61:fd:92:57:95:03:19:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:5c:2e:db:d0:44:46:a5:99:27:72:16:f7:8f:09:02:36:59:82:b2
Fingerprint (sha256): 84:00:d3:14:c8:e6:48:5a:3c:69:4e:5e:35:a7:bc:82:41:a2:fc:1e:21:3a:06:31:23:da:cc:e7:44:62:0f:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.southerncalifornia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.southerncalifornia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.southerncalifornia.com

Other certificates including the domain name southerncalifornia.com

(limited to 100 certificates)
sni180576.cloudflaressl.com
southerncalifornia.com
sni197358.cloudflaressl.com
sni180576.cloudflaressl.com
southerncalifornia.com
sni180576.cloudflaressl.com
heavymeta.bible
sni108763.cloudflaressl.com
sni108763.cloudflaressl.com
southerncalifornia.com
sni180576.cloudflaressl.com
sni197358.cloudflaressl.com
sni108763.cloudflaressl.com
sni197358.cloudflaressl.com
sni197358.cloudflaressl.com
sni180576.cloudflaressl.com
southerncalifornia.com
southerncalifornia.com
mymedicaremarketplace.org
sni180576.cloudflaressl.com
southerncalifornia.com
sni108763.cloudflaressl.com
sni108763.cloudflaressl.com
www.southerncalifornia.com
sni108763.cloudflaressl.com
southerncalifornia.com
sni197358.cloudflaressl.com
heavymeta.bible
sni108763.cloudflaressl.com
southerncalifornia.com
southerncalifornia.com
www.southerncalifornia.com
sni180576.cloudflaressl.com
sni108763.cloudflaressl.com
sni180576.cloudflaressl.com
southerncalifornia.com
sni197358.cloudflaressl.com

Certificate

The complete raw certificate details for www.southerncalifornia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304589229861757770390786783997606111568800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-16 15:26:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 15:26:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.southerncalifornia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645020386410433487010634751741301012401277957263212795923077156207086567479986200526602384645870387684358506454967614632805962058916103234020126281254161071229785351824153990860622509050870428013964577076795395324999348797291190734159474425465588697085939855807452397867578354993097341923423058433350769173583600550761350279782181986941315841437760803940324082620507569937361449378423175910063284296212203139899921081969881087442808675404156799573679547831869883179060941918266918598113173985789877004808952794198150331997368684205125973878767234395831066346551255217428944234433866024099700717398781912610941020970450045320305253692682593060640429756241812927274093087870556515642922582840861264479060495987375378753849031593090505990379188427041006270043601560737911598679900535807814666047389542917377872155655383713752944081058228735044293536017744345068819162543973123187264105392423514040435501876557714795532347327918268424669737451969580258822715066601983680652091247022676862246247475465768506879945327810731461851551116438433972453711266286325206503661371271705785388478909349100768650243793815007847677897296818709591601161157848094540784327926357469481445567536439013101760752150357888588216476490268768488671804676243439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c434d5c10792b045925a830261fd925795031924
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerncalifornia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016faf2d4a460000040300473045022100ae0939a44d679cee8f377f26f05c29e75b3a12a3a6047d8a6bb229b91082221402205090790777295ada4cf8fbd2a488b55ff427b490165484882d2c7c732867da1900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016faf2d4a6c0000040300473045022100c1c26193aebcfbd041738cc855dcba254e85e0ddf8785d0b601da9b0aa90e560022020020b0b20f01d6d98e67104740ff981a728015b36b5ab9346f64e7cec18efd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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