flatfeeland.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1f:a8:e0:87:b2:88:0f:6c:41:c9:8f:b1:2e:c7:7a:f5:3e was issued on by Let's Encrypt.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flatfeeland.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1f:a8:e0:87:b2:88:0f:6c:41:c9:8f:b1:2e:c7:7a:f5:3e
Serial Number (int): 272110087299888028002239640765452152141118
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:9c:a4:6f:a7:0e:1d:0d:16:a4:65:d8:a7:bf:1b:0e:7e:b7:de:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:c8:02:3e:a2:18:34:69:0b:51:2d:ea:1f:63:ad:ff:73:85:16:95
Fingerprint (sha256): 84:87:15:a3:90:e1:97:9e:7f:e9:62:52:36:fd:18:d8:59:b6:71:38:65:1e:41:79:69:7a:56:16:c6:4b:69:22

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flatfeeland.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flatfeeland.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

computergeneratedstrikezone.4kcod.com
computergeneratedstrikezone.com
flatfeeland.4kcod.com
flatfeeland.com
mail.computergeneratedstrikezone.com
mail.flatfeeland.com
mail.organicospremium.com
organicospremium.4kcod.com
organicospremium.com
www.computergeneratedstrikezone.4kcod.com
www.computergeneratedstrikezone.com
www.flatfeeland.4kcod.com
www.flatfeeland.com
www.organicospremium.4kcod.com
www.organicospremium.com

Other certificates including the domain name flatfeeland.com

(limited to 100 certificates)
tetonart.gallery
flatfeeland.com
flatfeeland.com
gemstateorganic.com

Certificate

The complete raw certificate details for flatfeeland.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75wYfqUUll4E4pmvIkJZ
ile+OB/c6r4Q68mt9BnnYa7qtyMV3DA0OvEI3A2n/yUeywjvHexRnvBMKxK9qaHo
2Bai+6jULjupI8J3X4Iw98EqA9umdQQSh9jGRpOA53OchDtJeL8imZQmMsevCXk1
9VDeyhOWS6M8bN1vQjgJubGtpDMlkDfj6ziqHUbD+3/BKs6KOqlW8gYGpe5gfn2y
opifMs+oQA88j1ukuxDr6kJkutz6pSi2kWcCoNzFkCk2CD6oxVejIkhWL2Z2fepj
1Vqi1lbQ2uLl91+1i6F+NVxNgSVkpE/6HnpDulZWyUG1UMsAWWuFhs4LnKUX/8cE
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272110087299888028002239640765452152141118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-11 09:01:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-09 09:01:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flatfeeland.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30247928536749835375773745282668012862846204014670085970330008926913126842432092743436146903865435389680725445623775869812023431901057103078261545257228522890929077387319957863038175838867343780024245617616601376941429802506387626249798290157233289272097887396708845319113757120536790699907172732893737123099471009439257498357139250794144201894095530064135220331077371014550831423581976533730279562424796460664474211482117868623937259574380806483911254688794814918670696710379361016446557771365907413245311774136631164293061208003182242812325444182614912455565453026384062333083780568972820592210047250105176422810713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be9ca46fa70e1d0d16a465d8a7bf1b0e7eb7deed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (439 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computergeneratedstrikezone.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'computergeneratedstrikezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatfeeland.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flatfeeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.computergeneratedstrikezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.flatfeeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.organicospremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicospremium.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organicospremium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computergeneratedstrikezone.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.computergeneratedstrikezone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatfeeland.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flatfeeland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicospremium.4kcod.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organicospremium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167023816eb000004030048304602210080a028c3ecd117dbe5d663a57bd995c99bf32ed06a79aaa894ef132db3ef8fe5022100d13faf7b5a9c744a72276d19972d9700c36fe8f5551df72c3a5e432f174ca79f0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000167023817510000040300483046022100df36cc894aca04b8bdc39af977ac9f1cdafcfcfece6c5180226b9db6aca2a8ff022100bea334cf3f737d40d515d7c7503e5a695421b948e58f19994573d6228c9347f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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