lajollainvestments.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:1f:7b:66:36:b0:99:27:2f:18:dc:ef:81:42:1e:30:1a:76 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lajollainvestments.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1f:7b:66:36:b0:99:27:2f:18:dc:ef:81:42:1e:30:1a:76
Serial Number (int): 359161922868592867935365712933194642233974
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7b:f2:7f:98:ea:f6:34:ad:02:55:01:22:d1:56:14:94:05:7e:21:fb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:76:b2:2b:9c:fe:a9:b2:d3:72:1d:15:b0:24:65:17:0e:14:3d:e2
Fingerprint (sha256): ee:e0:26:8c:3d:6e:8a:53:e1:37:aa:ba:f3:f4:a0:5b:27:d0:ed:b8:3d:8d:e7:b2:ec:34:8b:95:e6:33:45:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lajollainvestments.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lajollainvestments.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lajollainvestments.com

Other certificates including the domain name lajollainvestments.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lajollainvestments.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgISBB97ZjawmScvGNzvgUIeMBp2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTIxMjQ0MjNaFw0y
MDA1MTIxMjQ0MjNaMCExHzAdBgNVBAMTFmxham9sbGFpbnZlc3RtZW50cy5jb20w
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC7wBmIoKi+/2augeE2LMm2
Y5z+/gx0b1/Dp9zLRha5SiUBaNyaIlY8DG01MwbeGontkSW1hNDeS2aGLbdSv98p
Or9l2+gWsJnSnRenAnLgYR5Udt/0TzKs47U3E/rwEkLNjhiGJltyrLde/SQzaDTx
0toUm/sh0RbtTBUdjsZcgwg89zl3EawuW0G3LWklT91Cc8VPLoMmFONK9XovJqd1
VLOGWj88y14MeOoL/WAMLyCHJCW4BNf9LCHtvADcW1aT/SVDCNHrrdMCbKcBFOgx
x0O1OX2hfuadW+kIZpmjpV7qV3wGW1I6vpVg4LdNDNj9ev/uLIs6LR5L0BAN8sCN
mka7iX/0gxHuCCAukjdQSEOKTUwdDCqu4tTvq2DcPYWcg12RwK+aDFcEafSNfz+k
oZ6f3JxicaITHiq2X8PN/Pr2NvcchAuZymag/yEdPPwcODqMSXKgi/4STZdC20vT
XUSEMf3DQOi7Q6SNA04KGUbXXQ1jci3NNSjXGcfFk4eGnq3ARWADQYs4GJxrNjfo
Sdr1Of/z1RovUFg6obAhBOXKxKCCoeLNvrukarElRmCzA2l0SvthKELf0tMSIBhk
JWqYji+KiaxVhwj6CvigtTlLRwC0PChwBWlLFrMqlUXjrR4DdDrz161V+a+yK6vB
gdj9Goj18S0FkU/rXYCUvQIDAQABo4ICazCCAmcwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBR78n+Y6vY0rQJVASLRVhSUBX4h+zAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFmxham9sbGFp
bnZlc3RtZW50cy5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOey
SVMt74uQXgAAAXA5pMCRAAAEAwBHMEUCICiXzh21Ce0/sggHiW6pneV1TxgG0m1n
A/DH5AJetbCCAiEAi4h7PeVxyER/T77teOmvzheVcJRLLEh2YxdiIJUKLEYAdgBv
U3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAXA5pMDGAAAEAwBHMEUC
IBE3BRGyLBEYz9uoY2ppoq0IpV6CvzzZUWdRzvy2HYjVAiEA5g9MDssUnhMtneby
4XHkL80QMgNxninUX262o1ubWY8wDQYJKoZIhvcNAQELBQADggEBAEdhpyLEX/H/
Y1nTCi4AUeBWBdGIH5JbYk3WmcFOXHxpMS/EJDPhC1jw3m4U1ElXXZcpdj39G+Zs
jmNb0NGqCP7JK9dxICS1l3qWlkgTwQ9ih8izI5u9Xj3kSHbbX9WOLbruC/en9WwM
683zudjVH6Q3HiJvVtp/L10VW/6Nv5/mlKnarouQ7t1kYCdAs4SkS7Vsq/84u0zN
RM6McgB+UcAlVpgKhbpOwrIqdTInkVvtfpMIz5UaRjjBn6PTd9PiHboxhLvAoHFo
0Umm5DokblDf/iHG2eitzu4kFL+xENI0dobau/NWL77iWbEAYN4U/GVr2gXV4hH9
oXwnnl1bKrE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 359161922868592867935365712933194642233974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 12:44:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 12:44:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lajollainvestments.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765954763254630668818874687239390373593179014686852474733639019969753152158026834223228908032618177791123767537972158572635191175260429228086663669938029266326770628869786877356714581666885790509402277185962038220222121332208860800574053350440651191848328904411875579637705925875705790762795744601339077969611702320137982679043801135607427875847196509559926337130488015640862512362167029436847477707902871304978871462426203638510108610517564601226521482474404112194640375752482644402401526661492545656388389719023483289420704546783437612320141533777634713272829503323093500545699077571613925659671222337236148256887632210162466772758953449494530429132676348223825110276966889013490063961896890179993982609039100097349129905244182303663209940311587315221831300427325635517845467033650004076126412247159511789120920010936027790083407887105935108636641302795583202379697233324857389112005079596185438729797793232684151825167388747490907473042479199769354352142834007561469437833240561356223359694118096797210999985340565997090015481907896899680892813591038683098107026883073839214409437952185272391148053404366743041505022501409493901159059714701265378711103959335651554573570968270624572225286656731945807913144095196770699402180334781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bf27f98eaf634ad02550122d1561494057e21fb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lajollainvestments.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017039a4c091000004030047304502202897ce1db509ed3fb20807896ea99de5754f1806d26d6703f0c7e4025eb5b0820221008b887b3de571c8447f4fbeed78e9afce179570944b2c487663176220950a2c460076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017039a4c0c60000040300473045022011370511b22c1118cfdba8636a69a2ad08a55e82bf3cd9516751cefcb61d88d5022100e60f4c0ecb149e132d9de6f2e171e42fcd103203719e29d45f6eb6a35b9b598f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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