flexlabel.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:75:50:f5:0b:ec:73:ec:9a:81:88:bd:46:05:30:e1:52:3c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=flexlabel.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:75:50:f5:0b:ec:73:ec:9a:81:88:bd:46:05:30:e1:52:3cSerial Number (int): 388369791251024149920103285142937093100092
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ca:e2:43:1a:8a:81:69:fe:fe:1f:63:85:a2:ce:e8:34:71:69:65:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e0:e8:34:be:7a:e2:f7:36:55:74:6f:1c:8b:7a:f9:d1:9a:7f:9e:c3
Fingerprint (sha256): b0:94:3c:aa:1c:9e:6c:3c:28:e4:f8:3a:6e:ed:ed:e9:e8:a1:9a:4e:82:cf:b1:98:7d:bd:5c:33:fd:d0:8d:c9
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate flexlabel.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for flexlabel.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
flexlabel.com
Other certificates including the domain name flexlabel.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for flexlabel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISBHVQ9Qvsc+yagYi9RgUw4VI8MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwODA0MjVaFw0y MDAxMTAwODA0MjVaMBgxFjAUBgNVBAMTDWZsZXhsYWJlbC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCjFhNyrFMm1ILxyF8bM2ggYfQuv9lTkoPg YZSYIw6+IKYPCeULVEMIOmBcifUMwDHZpzY25oDjyyLwCoEH4xhePBCdJE/O9EUM VcWZrSi9hvGfsWFgvnL0u2C0LBQUTtgQ5o048OcfVeNNGzdeWDeaMKqJqxzOvF9h C2pVdi/xv8/399dYr3dGhA5h2Tk7STWmKYCThrJDgDBEQc2UWbqMTxnUEIzQ8Q61 TvTOpJQycn2ZFj2q53S9kndYBhATecW19IgEPZJe0GG+aXuxTOAVzpPif21RE1IL wBdBbooqugsv2KOGWks/A3IGFrEIhQiNXs38bVqb0Ui1sw2QLAGKkzq4tSvc+Lok QQFaMxGlOyvzQony19usSdCVxUmWrAvSepvkz8+54GWhZPm49XfznAEJSxnjE//U e7UEZtxc0MmReRS4ISlaN1apxo6U6uwwNfZNWjOiqDr9wdHwt70zinkz8om5zZmE p7CtpR+sAu5V9rrnOquhnfCmeBYL1drsYizvq2791d2+TDSO57Gz1aJW8TE2ebGs zzOOfje98QeaGjz9vaF04tQ3GY4Xf4WbOQb5aw9hVGMWiP3tBGuT+1mABRfgF0xi yn5l6OP8oIdRU0DJuWND23qzIAwDVq9rCMi3UG5QC69hX9iJGRBwlMBdA3QEpTO6 O9urc5xR+QIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTK4kMa ioFp/v4fY4Wizug0cWlliDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWZsZXhsYWJlbC5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW2/Nj1oAAAE AwBHMEUCIQD9+HdIqzEztIgIJDgbrC18kS7pSGi2Bk6Np42morEXeAIgTT3FpvXm JsIpxR2R7+bG/mRzEuSeY7wZIJNDgOAncAUAdgCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAW2/Nj1lAAAEAwBHMEUCIFsq8vytxipUH+bn4+9D9ZTH LmJAsYN8EzGWAXH7CkKyAiEAp+qXSyCLS23TVaQ7wVU3DM/iMls6wuLfpKBbwNrm 6w4wDQYJKoZIhvcNAQELBQADggEBAEW/Ybc78JKJiHrZhZX6yDcc7KdTEGBVchpL jP0uG4JTgAxj2bEtZusT5CSMlm5gELrJVwhyTxreIDCpMpuWskL6Il3lN8eKYviD eeCI+avG6iJNOE+O9pXU9CTOFaV1iIjup+owwapbJS+u4XmUbxmvh9uXmNqUL1ch AbboQJlF7dnQnryIVdF4n/dXUFfH4qqmHqLTL1wpoPgCxEkjDDEV0tIhW6Bzr1fF 11x5U4iNhWPTnAJ9BA/GIjt8jX8vMXJ4j8Lzc4zj9bWdUe/cpfP/6kpkdBE+FSAT Koo3CuW5RJ+slyRRPEoyrdZg2vuLbyabjAgZu4P8yRCGTaOqR7A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoxYTcqxTJtSC8chfGzNo IGH0Lr/ZU5KD4GGUmCMOviCmDwnlC1RDCDpgXIn1DMAx2ac2NuaA48si8AqBB+MY XjwQnSRPzvRFDFXFma0ovYbxn7FhYL5y9LtgtCwUFE7YEOaNOPDnH1XjTRs3Xlg3 mjCqiasczrxfYQtqVXYv8b/P9/fXWK93RoQOYdk5O0k1pimAk4ayQ4AwREHNlFm6 jE8Z1BCM0PEOtU70zqSUMnJ9mRY9qud0vZJ3WAYQE3nFtfSIBD2SXtBhvml7sUzg Fc6T4n9tURNSC8AXQW6KKroLL9ijhlpLPwNyBhaxCIUIjV7N/G1am9FItbMNkCwB ipM6uLUr3Pi6JEEBWjMRpTsr80KJ8tfbrEnQlcVJlqwL0nqb5M/PueBloWT5uPV3 85wBCUsZ4xP/1Hu1BGbcXNDJkXkUuCEpWjdWqcaOlOrsMDX2TVozoqg6/cHR8Le9 M4p5M/KJuc2ZhKewraUfrALuVfa65zqroZ3wpngWC9Xa7GIs76tu/dXdvkw0juex s9WiVvExNnmxrM8zjn43vfEHmho8/b2hdOLUNxmOF3+FmzkG+WsPYVRjFoj97QRr k/tZgAUX4BdMYsp+Zejj/KCHUVNAybljQ9t6syAMA1avawjIt1BuUAuvYV/YiRkQ cJTAXQN0BKUzujvbq3OcUfkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 388369791251024149920103285142937093100092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 08:04:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 08:04:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexlabel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665333788142092924214457381086237543870337713919135658484999388376939692220502983403856103252996907032641030186746109896844692119609564026137192393901828168944787051752872885673831730509849468886286863321472820316321447816104493090332657377985329363043395821065410022795721434150401509990066159681550055252148740037904409045871319745241052635431981241374858691498249792711444085281218252638738713244326128700210014374186353505489617691622061168589154497305640069974042391894636752998314913913801564225444505249191443174423825168232614782264413495762515930350815633982391492822457310657028218206057303685289457933784528945496228757923780086669296069488969377887213206514784843346665019188129058318479042292345524665091356466760162248443204842431121863408101885123788886565237786021269757774287197496570492328455803451438901021860156812704132993146085340468552447003616281507657177255831160540072209197559303840538590562376855902678279951108265796196300461676910666487690626584836229286752455371398120027646805805469979674751552683145290814795416562969104272414508066378226152843077958934242997421021564025903206163680637135980203498985850714783069168837815663567716144926512291505085501797508787009834813107914391969001521727477142009 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cae2431a8a8169fefe1f6385a2cee83471696588 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexlabel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbf363d680000040300473045022100fdf87748ab3133b4880824381bac2d7c912ee94868b6064e8da78da6a2b1177802204d3dc5a6f5e626c229c51d91efe6c6fe647312e49e63bc1920934380e0277005007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbf363d65000004030047304502205b2af2fcadc62a541fe6e7e3ef43f594c72e6240b1837c1331960171fb0a42b2022100a7ea974b208b4b6dd355a43bc155370ccfe2325b3ac2e2dfa4a05bc0dae6eb0e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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