hjrco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:d4:bd:5e:a6:57:ad:ca:a7:97:8d:bd:28:14:ea:d6:c6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hjrco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:d4:bd:5e:a6:57:ad:ca:a7:97:8d:bd:28:14:ea:d6:c6
Serial Number (int): 288842226747893995282074773098750414608070
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f6:b5:6f:ea:ba:a8:b8:57:a5:e6:11:14:eb:ea:e4:1f:0e:5f:d1:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ff:6f:9e:0c:49:92:af:f7:f8:6b:9f:f3:4b:9e:0f:d7:86:33:bc:5e
Fingerprint (sha256): 9f:c9:27:2b:6a:96:db:4c:d0:e5:30:2a:cc:f3:2e:0a:7c:c1:7a:64:89:a4:61:48:85:7b:86:0a:75:80:2b:f9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hjrco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hjrco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hjrco.com

Other certificates including the domain name hjrco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hjrco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288842226747893995282074773098750414608070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 20:39:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 20:39:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hjrco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741048039764254510655739159524767508234325910498757894180980880048763172114847061661133082495245166532661364570773531027727114711980776397237475762400063146763908239193604089304097321569624589603933247321982705962721020914809986468151919735350999876950815102908995759947310345404074926055496627353200584753334376839223091666481165610111263032111102460310831674227030765528974087731603943077473489957170088796045234222030841601040103859148853349324817285227284543250589435037458352940151855501873104377052019796847905154278624166858627589133108281571578120249842638959009842289912066797985625876358057771116995603509795583893519605067526188703712920417111149156385692511353474230663425968902817728063014138611329877601372289596447074570821892311403291928723993026290409070233325254046754175979782201671911518997111884423670008065975992621018472087460256190164899010329820438464713877720501874691190291827211013627260191432071834846993499610752613720194248639576335494361537997451311073234192356258265230466026849311924067375271659618729390026706923826309528101267236612054079793754047040289215798117160351929983982729291384018669058358432009389958857643533565559212821146833978232798903401167222177451913020424342897085158065887508973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f6b56feabaa8b857a5e61114ebeae41f0e5fd167
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjrco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f10a6c78e00000403004630440220703f457b3f0168f5d646cb15424cfc6e6ca307d7a98c638ba759bb8632eeee1d02202cb9dd65cac636d015c3e0f5d4277a2e1ff17b50b0b65fe2888cad598b8de607007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f10a6c7790000040300483046022100fe0a82988f1f5415fe07bfa725c991d82aed918c84006aac91c9cce8cb1a2590022100a865329926f5a781e24c677fc4d97ecdff25db368aa0cf14bc17e578f9d5751e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005c21c99e99c834ebebb6f09b948018e57816c59f176a41f1faa9ca9b8d5317bd1c9497fa382bc4e6c226cc44b42750d4313185621c438f8e59ed2b43fea210bb81ecb4d106376b69c3579b1b95db8f8c12acbbd4ce5f99a90ca03f7d7e404422ef30b67d79fe0a6ee8776f05a0b49283e138bd01ae778ef7b10c6212883b82176625e166635734d030a914e22dff5d5848ba8d09d79be3e2186c8cabfaef43be64617cd7a2aa252e4ce72f30449a1b60d2878c8e9b0a08f5387b5e43857d360d51490bc33a7a08f51a73acd6242bf804a0e9e24693e4bd1368dc8c96a67c0bb60ef3574be347eaef807d804826838d932ca84c962229d9acb35ebb6e08cf80f9