lajollacoast.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:76:af:a4:b3:34:d4:25:c6:53:15:1a:04:d1:d1:bb:5c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lajollacoast.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:76:af:a4:b3:34:d4:25:c6:53:15:1a:04:d1:d1:bb:5c
Serial Number (int): 302328502721759585003412029583592195734364
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f7:2f:01:99:75:ba:fa:92:3d:0f:b0:9f:15:72:e2:40:d2:8f:54:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4d:d2:55:b3:48:ea:21:ab:ec:51:2e:97:56:6d:37:04:0d:59:8e:0c
Fingerprint (sha256): d3:3a:3b:6f:e3:70:2e:f5:5f:9c:8c:d3:a6:cd:a0:eb:e3:c4:bf:59:da:29:fe:24:f7:39:09:ec:b1:8d:b9:a8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lajollacoast.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lajollacoast.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lajollacoast.com

Other certificates including the domain name lajollacoast.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lajollacoast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302328502721759585003412029583592195734364
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 10:23:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 10:23:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajollacoast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712179963837505554789544283022621112666330037273332668572649060267408144132147722391017603382755952781540893700406721022634916789119158588816852247323877174958941888857455316676951241159037763387235661738051916257788325272003486794109453558473901248317064795688833206380940957901893901027852225664161726779006571787881205279474507820258067770417919660663785868533971983570994277363462258249732745671677414607819834890970816966125745269485032501170693836618815051766977924913350403159153998308092878044929082026877800269944614398037320904684738048816982455753509088821471041550978377262510225161835070307035392478764335128962008631003721416507446236764955897903408974412086372270264351649260972530369635769666429547600560580864713230591836953565484964825696678754933505939996740120239668929280311127633748905209862238697721806665239810690990216361572540012768061780283742189619601893740605519191906519656773797021220334858671899044089869103183529252695215031695988528676363915397108668659394055798205639375005800171210283089694270489089995451347314866716456060583791233286292070289168148720777351343766457979444554490688010336569674899624396474686659905696187527394561032273478237249390986742387439933544718768384769479800364752213077
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f72f019975bafa923d0fb09f1572e240d28f54ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollacoast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbfb59a620000040300473045022100839d0c555bbe98decc7a457a45db3a867020548e6fef5ed78f408653af46012202201c0f21f78d839cbc2d39a919b084fec4f6203e488f1fb5339f21b4663ecb08c5007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbfb59a7f0000040300473045022023ca0f29597ee656e7ac0608b9e00d729cd07f240f6190b2913bd5a3cc10f5b3022100eb0cf9d8c7574ab660e900e9515648458fbb5d4c6419341fdb7f5b7094fde876
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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