www.windowflex.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:13:73:64:4e:ec:fe:ca:21:a5:6e:5f:ac:eb:27:15:e4:81 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.windowflex.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:13:73:64:4e:ec:fe:ca:21:a5:6e:5f:ac:eb:27:15:e4:81Serial Number (int): 267955604816784338546419227425331402368129
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 68:96:f5:ac:9f:0b:41:ef:37:db:ef:f2:3f:77:78:b0:00:41:47:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:ae:54:ec:a3:08:01:c7:e4:e9:3b:57:f3:f6:75:b9:c2:fe:b2:6f
Fingerprint (sha256): b9:8b:8c:64:87:c2:c5:f0:69:d4:8f:c0:99:e3:3a:f0:f1:50:d3:35:dd:e6:7e:d1:f9:5d:42:15:c1:f3:ad:80
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.windowflex.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.windowflex.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.windowflex.com
Other certificates including the domain name windowflex.com
(limited to 100 certificates)
windowflex.com
windowflex.com
www.windowflex.com
windowflex.com
windowflex.com
www.windowflex.com
www.windowflex.com
prpdirectory.com
arcisate.org
zeroallergy.com
www.intl.bet
test-strips.com
www.perscriptionallergy.com
www.smileycans.com
www.yueyang-print.com
lewistonrealty.com
www.windowflex.com
windowflex.com
esportssemarang.com
windowflex.com
www.windowflex.com
windowflex.com
windowflex.com
www.windowflex.com
www.windowflex.com
prpdirectory.com
arcisate.org
zeroallergy.com
www.intl.bet
test-strips.com
www.perscriptionallergy.com
www.smileycans.com
www.yueyang-print.com
lewistonrealty.com
www.windowflex.com
windowflex.com
esportssemarang.com
Certificate
The complete raw certificate details for www.windowflex.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgISAxNzZE7s/sohpW5frOsnFeSBMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTUyMzQ4MjVaFw0y MDA1MTUyMzQ4MjVaMB0xGzAZBgNVBAMTEnd3dy53aW5kb3dmbGV4LmNvbTCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALjWzSi638vDyMP91/cyGiWDshMM En14GxuudDzL8iYT5zprXODKzEO5G9Yqphr4Z5HKfLOidRv77JqAsxMCo+1+GeA3 2Hac2JWWNxEYA7/y0Kd5ZggeYTgWL7EIk38ZjIBRda6Rrc6sSNvxD3Mj9K8at649 ULowxa8m0qwtSzljXKqKlJXfSPan9gKF5LTT81jdFKtH7PQxNiJ+0Z1tlV9ffC6V PT1/hKg9caCDgSwoFj5jr8udDsOCa9aqM7bYWsQnITc6ZuYcfpxNx/I/AhGsf3X6 LHuhCqI+TMYsEgzG40GkiCRCEGkgi0B3v3CfClZviyPLemZQntp+BhyNdrxjmgfM wNS/hIPeAmT//c+0kIeiu9tmy8iRn7599jBfW8zsKh1oh3lDQhzbaZkp421vLH3L Dhw8diGpiUaPEqtc3EfDpAWzCzBm0tJ+4oKNnLCTTfCuwJxHaqhYQlsh7RirUCLl O6lul0EXzpNqlTyLF9IfGl03Hjia159ZXzwf86/owgm+8+Vk0FgHRZfMqbBi9A1r xuKdGZyJlJHmNwlHIxBEJqeqUL6FZOu3t2sIM/G2aGNatMM7QZSZseo4MVp+KRcM xS2ZVH4WsDZaAdykc/PjA0jhB6EF+I9+PmWmZJmo7H/fmhLSkSMSG+Hjqu9E3rM2 AFS+HP95OLvI1zPtAgMBAAGjggJnMIICYzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FGiW9ayfC0HvN9vv8j93eLAAQUe+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LndpbmRvd2Zs ZXguY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFwS3fGCQAABAMARzBFAiB1z+64KAIAoF7QXgv7e0+vMSDCPh0XDzVY6161+PhI 9wIhALny1zXCHXUBERX0Pav+r996z31TbMv0l0aTqfpSVi9CAHYA5xLysDd+GmL7 jskMYYTx6ns3y1YdESZb8+DzS/JBVG4AAAFwS3fGHgAABAMARzBFAiAM8huhTyNG TLhkdrHoZETF/kRVUMZHUQ2EZVHv2whdnAIhALKbWYoqd3R7hYYW4bUX822gxTAt bGtuVPUJZgpjyjysMA0GCSqGSIb3DQEBCwUAA4IBAQBNhlbPAuft/k6EBMmdroSM hGEE2vDhhEUt+zeT6UdknpMRA0C+a9NT7D0b4m7veT6nRfkLWsIWaUB0SpzfImW1 m9gnBng0N+9LmpdbjL2XEyHLdLJ5/y8bNnduqAUSMtp+sJj5Ls4ZCvhHx//c9/QZ CLrEtTCEBdvKm/CFxdE1yRt0pPAGClXJOyhxkSHiM+ScFjUhtudxl9IyVeQ7uNBV I2jdyEgRufbfLQP3hGd/3h3eUZFLWTXx//qT7f7Xkf6JQgnfN8BiTrBeRKiJ0EJf MVZSoKLDpRRxPKe1FR26J3tVRpr0F/kyh5dc0d6ppwSPrSNypkS25enKZ8ZC7M2v -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuNbNKLrfy8PIw/3X9zIa JYOyEwwSfXgbG650PMvyJhPnOmtc4MrMQ7kb1iqmGvhnkcp8s6J1G/vsmoCzEwKj 7X4Z4DfYdpzYlZY3ERgDv/LQp3lmCB5hOBYvsQiTfxmMgFF1rpGtzqxI2/EPcyP0 rxq3rj1QujDFrybSrC1LOWNcqoqUld9I9qf2AoXktNPzWN0Uq0fs9DE2In7RnW2V X198LpU9PX+EqD1xoIOBLCgWPmOvy50Ow4Jr1qoztthaxCchNzpm5hx+nE3H8j8C Eax/dfose6EKoj5MxiwSDMbjQaSIJEIQaSCLQHe/cJ8KVm+LI8t6ZlCe2n4GHI12 vGOaB8zA1L+Eg94CZP/9z7SQh6K722bLyJGfvn32MF9bzOwqHWiHeUNCHNtpmSnj bW8sfcsOHDx2IamJRo8Sq1zcR8OkBbMLMGbS0n7igo2csJNN8K7AnEdqqFhCWyHt GKtQIuU7qW6XQRfOk2qVPIsX0h8aXTceOJrXn1lfPB/zr+jCCb7z5WTQWAdFl8yp sGL0DWvG4p0ZnImUkeY3CUcjEEQmp6pQvoVk67e3awgz8bZoY1q0wztBlJmx6jgx Wn4pFwzFLZlUfhawNloB3KRz8+MDSOEHoQX4j34+ZaZkmajsf9+aEtKRIxIb4eOq 70TeszYAVL4c/3k4u8jXM+0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 267955604816784338546419227425331402368129 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 23:48:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 23:48:25 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.windowflex.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754077607220747058638347028387803637502894086594059107192298120838371398926559650423538849846762539663374194405853040188528293582801211280132426747924117439302835331134574707673927616250369332566031494181138171722570601337297573188363798936815459982076209025843358196569575717649824253603283279530788594801771502498905129410997911966256110871609204823490774947865935370627620934128692387343848398289149398898109055880906988798652357274136314615653134675772121223317494858497731767418836864979736754231098707384876261403935929969694784326874580355696435473574093584325022648860132392801432207662862407500131521827692360083479597577278567256432445072314110968250373799908134770477857755606410612764380204324322135011629704040765605172201065266574575139815470554147872412433696064924972315797568833090378847892692538516360406810633096992067248307792725865321481577154459860643183089115396352772760640366311828982049049038019602352401554368366233448666352441713799265046991483392948782065113619817750735515327711815514684831782657214130732235262354765656960692073694707990172770018685443709778225783218946796422958036531621687121142855224920163003927788876336030448548167397716808795618402592425697202734192970889138159480626243582768109 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6896f5ac9f0b41ef37dbeff23f7778b0004147be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.windowflex.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704b77c6090000040300473045022075cfeeb8280200a05ed05e0bfb7b4faf3120c23e1d170f3558eb5eb5f8f848f7022100b9f2d735c21d75011115f43dabfeafdf7acf7d536ccbf4974693a9fa52562f42007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001704b77c61e000004030047304502200cf21ba14f23464cb86476b1e86444c5fe445550c647510d846551efdb085d9c022100b29b598a2a77747b858616e1b517f36da0c5302d6c6b6e54f509660a63ca3cac . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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