www.lockportautobodyrepair.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:cf:79:65:79:19:c2:77:b1:2c:6a:95:bc:0c:87:4a:cb was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lockportautobodyrepair.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:cf:79:65:79:19:c2:77:b1:2c:6a:95:bc:0c:87:4a:cb
Serial Number (int): 289175510037042065635368304191028756695755
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:cb:83:d9:61:90:63:22:a4:57:73:97:09:46:4d:f5:76:a2:18:2e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7c:44:36:65:1e:39:06:bd:d3:1b:96:a6:c0:64:fb:2a:18:0f:21:b2
Fingerprint (sha256): 92:7e:04:08:e6:0f:b2:2f:f7:1a:a2:9e:84:d0:4b:27:78:f2:3d:11:4d:51:96:9d:37:fb:da:85:5d:7b:13:e7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lockportautobodyrepair.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lockportautobodyrepair.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lockportautobodyrepair.com
www.lockportautobodyrepair.com

Other certificates including the domain name lockportautobodyrepair.com

(limited to 100 certificates)
lockportautobodyrepair.com
sni.cloudflaressl.com
lockportautobodyrepair.scoutbase.info
lockportautobodyrepair.com
lockportautobodyrepair.com
www.lockportautobodyrepair.com
www.lockportautobodyrepair.com
lockportautobodyrepair.com
lockportautobodyrepair.com
lockportautobodyrepair.scoutbase.info
lockportautobodyrepair.com
lockportautobodyrepair.com
www.lockportautobodyrepair.com
lockportautobodyrepair.com
www.lockportautobodyrepair.com
www.lockportautobodyrepair.com

Certificate

The complete raw certificate details for www.lockportautobodyrepair.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGjzCCBXegAwIBAgISA1HPeWV5GcJ3sSxqlbwMh0rLMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjgxMTA1MDNaFw0y
MDAzMjcxMTA1MDNaMCkxJzAlBgNVBAMTHnd3dy5sb2NrcG9ydGF1dG9ib2R5cmVw
YWlyLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ0IvWVuOlq/
iosNJs2r/BLEptdpMO9eHUZKgCMBn3/sRgOMaJkNbxs1fW7QhAhAFhJNP/64zbg4
0p3CKzrsTfK9s8j+K4fcoglk3B3wLkO3oi5LebF4ZMuJTffoFjwTLPLBoCAkSMY9
xDUoaxdmSR4NJPRlpaKvMeBFIetgsKeshMzNYmhdp3tu3IairEip75jPd/fjMSMW
HYt6wuBCc5Dr8n1nZkLr5dEbuNRnmkOB4Y2oCCG612pV6r8xNhvGyS2k/Vli8nm4
IBiS4onM+IRxCYinX5MbE/vsY2fazCmSVL4ucBSdFH4JDfQzuhfM10bsps22Jj+P
XFFdJGAzmLK4LJgmcG+pIFQbXMJHGgz4Y2a878Kl07BiCVWE6OQpM6RulNydIKBm
0w5nLDcfxp0iUslXlQB91hFI2b1TuDp3y/sNW1L+LXKioF8bRG1O3la5MDSdFhGr
sz8JybLFExQNaVg8RP4X9T6CaOZqv/hZkjMHWzXHnVm5ALixs0nJj/hflK8nENDy
UIKNiFxjrKlPGPnhfvSf8aa1AaoWyldSxdloxgGxkWMu784SB561uLQoim4A2gKL
GVgasWgT1KlhkYHq9384+dmHhyJDXE3q4n70TO/psiEHf7W08BBs/TiRGlG7A1z7
C7dAYEEtm9jHfsYMZe9zxzhs1LlXmvtBAgMBAAGjggKOMIICijAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFGvLg9lhkGMipFdzlwlGTfV2ohguMB8GA1UdIwQYMBaAFKhK
amMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYi
aHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYj
aHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wRQYDVR0RBD4wPIIa
bG9ja3BvcnRhdXRvYm9keXJlcGFpci5jb22CHnd3dy5sb2NrcG9ydGF1dG9ib2R5
cmVwYWlyLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAo
MCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisG
AQQB1nkCBAIEgfQEgfEA7wB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaB
cUVYAAABb0xlSRoAAAQDAEYwRAIgJNdPmOwVdn72P+iNC4cEpHrWM5zMeUQnQC47
rbP4jmgCIDpodcrflrWK2o+D1UOdjUuvrmvk8FbgvkhQUfvighzxAHYAsh4FzIui
zYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFvTGVJDgAABAMARzBFAiBW/9td
5kaU1nw2SbiyOvte43nhVCfs1RYpQZiWDyXecgIhAOIbUBo/jncFAPctBo+HRCUE
CUQTBiUsQercRAzjqFCnMA0GCSqGSIb3DQEBCwUAA4IBAQBvJcSCSB3zYlbpw+G4
FkUF8suBRstkYiee1L5+KQ9XWaStvHIVkwEqRCWrsAXWe0VLojBY8cUQ/S1EEjEn
NtEIMpegHYXcs1onIFzHW9crYrPGEOE3Qv0kZwBTy4m4zX59QM81+3RBlPsbRQ4f
fu8nyB5J/5jOx3tZbdtGLpa6kQvn43DGKA7JuFpTZj22m9Ny+tFexqlvS0mdXI6M
JqaEGI9/Gl9AuljuZntnjBCxtlMlp8Q7J6cQjv50ELdDJ7IRmSJzg2+CtjIWF/Xb
gDB0dfrEIfui0BhhVcLQ5//epulsHzwo4h5LPwjXJFUH3V/n72HUJDdtJBAXw76H
g+X/
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289175510037042065635368304191028756695755
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 11:05:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 11:05:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lockportautobodyrepair.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 640643397551672320657688798243083864101907193961184873553157627948001610595699779555454304850805920943517074194965649091787515195978583654008479492518505022011187813812605907437133714129292652959650160215956714830151418414550943481384323439206919511061633440588473979997045590462627538427096490908548704104985316982501913426650681722174635721893139672700554469112035741700322592970422665384267230304273689330440983901832849971993629158928662632687621882336859555421299785667993537974622823958480179258018708308677567571957565363965750979171568005606063046042468428783211263076238112474114553558554765747598189406453164202444757614758357792774392055245548940447356504207745197587736985927518660756154089587570576157576529050611526631908052071660726558601103575843303240029055335673657395801611691385845455403589250608884223620395222100362502532433204655932915734300942243813117675892135164554660261332805377643788469194620992508069023196165874994230858659351250113694162389343771734935761277163585184040701036804131660907193404463595620573453569177005990616562490974426694386146193024022838854089609957963044114974156904276680278075973058218986466836516276614450820602250575989115387480689862829618752982807743498395320984672354892609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6bcb83d961906322a457739709464df576a2182e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lockportautobodyrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockportautobodyrepair.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f4c65491a0000040300463044022024d74f98ec15767ef63fe88d0b8704a47ad6339ccc794427402e3badb3f88e6802203a6875cadf96b58ada8f83d5439d8d4bafae6be4f056e0be485051fbe2821cf1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f4c65490e0000040300473045022056ffdb5de64694d67c3649b8b23afb5ee379e15427ecd516294198960f25de72022100e21b501a3f8e770500f72d068f8744250409441306252c41eadc440ce3a850a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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