www.lajollainvestments.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:d0:07:31:51:a8:0c:b5:87:da:3f:f3:a3:08:30:47:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lajollainvestments.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:d0:07:31:51:a8:0c:b5:87:da:3f:f3:a3:08:30:47:84
Serial Number (int): 298704152559171865291338376170923487152004
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:c6:8b:2c:77:ec:16:f2:64:a6:72:c6:32:e1:b8:dd:6b:89:77:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:f2:0a:99:f3:3a:e3:eb:cf:73:60:a0:66:c3:e9:7e:16:57:ec:af
Fingerprint (sha256): e7:35:72:8c:e0:ec:d1:f3:59:fd:00:85:2b:9c:74:c0:7b:57:cb:a3:03:9f:68:d8:eb:37:80:01:d3:c1:fa:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lajollainvestments.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lajollainvestments.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lajollainvestments.com

Other certificates including the domain name lajollainvestments.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lajollainvestments.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298704152559171865291338376170923487152004
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 12:21:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-18 12:21:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lajollainvestments.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805855927438638116475673554606548771450330290426690459544950873990048216554546820994835290369859345346832063119056568405463887222605158944255049159764456491460645293471546490088851891199326581217795798896402573756961077078013948931716831629995826455355028391293578828455935777158297743836331352694552178861440417459757321094394388390868007168706474589873633357118802006630834264093471356942970807241404926507606724098590863130980456699824191753715034554622520806432465940418547097064449568886982224852642205814673641190877352256918070334315103748203341993557834008285741027807042242364974006986186717408361373098126584164681208701958544368676457080268841276458257714736964196183968352144510029396334283202117702858555192637060995533947860875928582465516448319683490485042437794373804731189472633037307496950456746918802702023033626658826781476921270591743658418694548399346500658220490507489358746394070168916769006877053258474380952860400645019716635659699359392940554742191864633868619794838887721517585170040264933535216193328968348855953928917793768584794948508675842790586814452151944785958671093876179905606055305153885797469608724802101100175929445867593867711459208168958880430794824638441855592159277152710318001154831696679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60c68b2c77ec16f264a672c632e1b8dd6b8977c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lajollainvestments.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170587633eb0000040300473045022100cd66b1f5b5422cded5557a200d0df326f624038011aa4d19a011700d8c031636022027d2f4b724ba3750346b3334da85747506c95ac8d8cdb2d3032b1ec9d91e36ba007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170587634610000040300463044022006266a7bc216157d3a0c0fc4ad62420343f7ed8e51c7c368cafa0320162a0d0b02202bed62cc1c71ad2680df5e70f6345515d3d0747776b1f0455e77e9b3682f5faf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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