hjrco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:50:d4:bd:5e:a6:57:ad:ca:a7:97:8d:bd:28:14:ea:d6:c6 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hjrco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:50:d4:bd:5e:a6:57:ad:ca:a7:97:8d:bd:28:14:ea:d6:c6Serial Number (int): 288842226747893995282074773098750414608070
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: f6:b5:6f:ea:ba:a8:b8:57:a5:e6:11:14:eb:ea:e4:1f:0e:5f:d1:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): ff:6f:9e:0c:49:92:af:f7:f8:6b:9f:f3:4b:9e:0f:d7:86:33:bc:5e
Fingerprint (sha256): 9f:c9:27:2b:6a:96:db:4c:d0:e5:30:2a:cc:f3:2e:0a:7c:c1:7a:64:89:a4:61:48:85:7b:86:0a:75:80:2b:f9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate hjrco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hjrco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hjrco.com
Other certificates including the domain name hjrco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for hjrco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISA1DUvV6mV63Kp5eNvSgU6tbGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTYyMDM5MjNaFw0y MDAzMTUyMDM5MjNaMBQxEjAQBgNVBAMTCWhqcmNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBALWlMEdQnKnWeGUr0Rcbh/iL6i70hyee+uVNlrjj 7zAqFLQkexOoCpcP0yT1MrZWlQtCT5vuI4FDMXZA7Cn8sO8JN/v9+TgT2p1Su1Bf 3BCYj4t8aXsRvzkTXin6VulQz95rV0A7r0HnPEjs1tSP90E2e8trI361dzPb5766 /tR5G7ArHo6MKumYlGCBe8VYELR94qTX4jtYyHnh/Ijo5efSnETS1KN1ArCtwpqf IsXLJ0+SxvpTjcbKN/UhfHIISHlXfDJsrrvV8emOTWB+DoJsXWc+/KAPCzsWhAqb KR4qXQCPKlClw6Y0Ma4y2yJ+NLMZHlwsEKKl/3debGlKaUedWXw1J39VdknDJAvk aIPdvX5THiSeAi59f0t2RzqhxjepsuMeUaq6Yr9f2k/XXoHPjQuEqnHRPPm0AExS /KAWreZ44vqk9+xLMSaCZGE4JzDmTX/U8y64mRdaAei5toh67izi99yA1IiWHyWA oyYgjGCq2LtFQDno2PT1pWDEdZMws/ISjDDowyugJJQxuXUsD4nhuqkGY6ffnioe ddUvDORj8QhIgh8RTkNpBjYjcdENAA5DF0QlC15Z3sZ3j0u5cVlS7XuDbKFtxj/k veShK43N41jRUSWeqVZVCdVs3/ZUqimnG+i95dNBSVC6b6Bro+3xJlPhxsZzhxVC H/ntAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPa1b+q6qLhX peYRFOvq5B8OX9FnMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJaGpyY28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvEKbHjgAABAMARjBEAiBw P0V7PwFo9dZGyxVCTPxubKMH16mMY4unWbuGMu7uHQIgLLndZcrGNtAVw+D11Cd6 Lh/xe1Cwtl/iiIytWYuN5gcAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt 74uQXgAAAW8Qpsd5AAAEAwBIMEYCIQD+CoKYjx9UFf4Hv6clyZHYKu2RjIQAaqyR yczoyxolkAIhAKhlMpkm9aeB4kxnf8TZfs3/Jds2iqDPFLwX5Xj51XUeMA0GCSqG SIb3DQEBCwUAA4IBAQBcIcmemcg06+u28JuUgBjleBbFnxdqQfH6qcqbjVMXvRyU l/o4K8TmwibMRLQnUNQxMYViHEOPjlntK0P+ohC7gey00QY3a2nDV5sblduPjBKs u9TOX5mpDKA/fX5ARCLvMLZ9ef4Kbuh3bwWgtJKD4Ti9Aa53jvexDGISiDuCF2Yl 4WZjVzTQMKkU4i3/XVhIuo0J15vj4hhsjKv670O+ZGF816KqJS5M5y8wRJobYNKH jI6bCgj1OHteQ4V9Ng1RSQvDOnoI9RpzrNYkK/gEoOniRpPkvRNo3IyWpnwLtg7z V0vjR+rvgH2ASCaDjZMsqEyWIinZrLNeu24Iz4D5 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtaUwR1CcqdZ4ZSvRFxuH +IvqLvSHJ5765U2WuOPvMCoUtCR7E6gKlw/TJPUytlaVC0JPm+4jgUMxdkDsKfyw 7wk3+/35OBPanVK7UF/cEJiPi3xpexG/ORNeKfpW6VDP3mtXQDuvQec8SOzW1I/3 QTZ7y2sjfrV3M9vnvrr+1HkbsCsejowq6ZiUYIF7xVgQtH3ipNfiO1jIeeH8iOjl 59KcRNLUo3UCsK3Cmp8ixcsnT5LG+lONxso39SF8cghIeVd8Mmyuu9Xx6Y5NYH4O gmxdZz78oA8LOxaECpspHipdAI8qUKXDpjQxrjLbIn40sxkeXCwQoqX/d15saUpp R51ZfDUnf1V2ScMkC+Rog929flMeJJ4CLn1/S3ZHOqHGN6my4x5Rqrpiv1/aT9de gc+NC4SqcdE8+bQATFL8oBat5nji+qT37EsxJoJkYTgnMOZNf9TzLriZF1oB6Lm2 iHruLOL33IDUiJYfJYCjJiCMYKrYu0VAOejY9PWlYMR1kzCz8hKMMOjDK6AklDG5 dSwPieG6qQZjp9+eKh511S8M5GPxCEiCHxFOQ2kGNiNx0Q0ADkMXRCULXlnexneP S7lxWVLte4NsoW3GP+S95KErjc3jWNFRJZ6pVlUJ1Wzf9lSqKacb6L3l00FJULpv oGuj7fEmU+HGxnOHFUIf+e0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 288842226747893995282074773098750414608070 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 20:39:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 20:39:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hjrco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741048039764254510655739159524767508234325910498757894180980880048763172114847061661133082495245166532661364570773531027727114711980776397237475762400063146763908239193604089304097321569624589603933247321982705962721020914809986468151919735350999876950815102908995759947310345404074926055496627353200584753334376839223091666481165610111263032111102460310831674227030765528974087731603943077473489957170088796045234222030841601040103859148853349324817285227284543250589435037458352940151855501873104377052019796847905154278624166858627589133108281571578120249842638959009842289912066797985625876358057771116995603509795583893519605067526188703712920417111149156385692511353474230663425968902817728063014138611329877601372289596447074570821892311403291928723993026290409070233325254046754175979782201671911518997111884423670008065975992621018472087460256190164899010329820438464713877720501874691190291827211013627260191432071834846993499610752613720194248639576335494361537997451311073234192356258265230466026849311924067375271659618729390026706923826309528101267236612054079793754047040289215798117160351929983982729291384018669058358432009389958857643533565559212821146833978232798903401167222177451913020424342897085158065887508973 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6b56feabaa8b857a5e61114ebeae41f0e5fd167 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjrco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f10a6c78e00000403004630440220703f457b3f0168f5d646cb15424cfc6e6ca307d7a98c638ba759bb8632eeee1d02202cb9dd65cac636d015c3e0f5d4277a2e1ff17b50b0b65fe2888cad598b8de607007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f10a6c7790000040300483046022100fe0a82988f1f5415fe07bfa725c991d82aed918c84006aac91c9cce8cb1a2590022100a865329926f5a781e24c677fc4d97ecdff25db368aa0cf14bc17e578f9d5751e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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