flexlabel.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:75:50:f5:0b:ec:73:ec:9a:81:88:bd:46:05:30:e1:52:3c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=flexlabel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:50:f5:0b:ec:73:ec:9a:81:88:bd:46:05:30:e1:52:3c
Serial Number (int): 388369791251024149920103285142937093100092
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:e2:43:1a:8a:81:69:fe:fe:1f:63:85:a2:ce:e8:34:71:69:65:88
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:e8:34:be:7a:e2:f7:36:55:74:6f:1c:8b:7a:f9:d1:9a:7f:9e:c3
Fingerprint (sha256): b0:94:3c:aa:1c:9e:6c:3c:28:e4:f8:3a:6e:ed:ed:e9:e8:a1:9a:4e:82:cf:b1:98:7d:bd:5c:33:fd:d0:8d:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate flexlabel.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flexlabel.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flexlabel.com

Other certificates including the domain name flexlabel.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for flexlabel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 388369791251024149920103285142937093100092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 08:04:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 08:04:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flexlabel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665333788142092924214457381086237543870337713919135658484999388376939692220502983403856103252996907032641030186746109896844692119609564026137192393901828168944787051752872885673831730509849468886286863321472820316321447816104493090332657377985329363043395821065410022795721434150401509990066159681550055252148740037904409045871319745241052635431981241374858691498249792711444085281218252638738713244326128700210014374186353505489617691622061168589154497305640069974042391894636752998314913913801564225444505249191443174423825168232614782264413495762515930350815633982391492822457310657028218206057303685289457933784528945496228757923780086669296069488969377887213206514784843346665019188129058318479042292345524665091356466760162248443204842431121863408101885123788886565237786021269757774287197496570492328455803451438901021860156812704132993146085340468552447003616281507657177255831160540072209197559303840538590562376855902678279951108265796196300461676910666487690626584836229286752455371398120027646805805469979674751552683145290814795416562969104272414508066378226152843077958934242997421021564025903206163680637135980203498985850714783069168837815663567716144926512291505085501797508787009834813107914391969001521727477142009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cae2431a8a8169fefe1f6385a2cee83471696588
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexlabel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbf363d680000040300473045022100fdf87748ab3133b4880824381bac2d7c912ee94868b6064e8da78da6a2b1177802204d3dc5a6f5e626c229c51d91efe6c6fe647312e49e63bc1920934380e0277005007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbf363d65000004030047304502205b2af2fcadc62a541fe6e7e3ef43f594c72e6240b1837c1331960171fb0a42b2022100a7ea974b208b4b6dd355a43bc155370ccfe2325b3ac2e2dfa4a05bc0dae6eb0e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045bf61b73bf09289887ad98595fac8371ceca753106055721a4b8cfd2e1b8253800c63d9b12d66eb13e4248c966e6010bac95708724f1ade2030a9329b96b242fa225de537c78a62f88379e088f9abc6ea224d384f8ef695d4f424ce15a5758888eea7ea30c1aa5b252faee179946f19af87db9798da942f572101b6e8409945edd9d09ebc8855d1789ff7575057c7e2aaa61ea2d32f5c29a0f802c449230c3115d2d2215ba073af57c5d75c7953888d8563d39c027d040fc6223b7c8d7f2f3172788fc2f3738ce3f5b59d51efdca5f3ffea4a6474113e1520132a8a370ae5b9449fac9724513c4a32add660dafb8b6f269b8c0819bb83fcc910864da3aa47b0