www.tennesseesearch.jobs
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:ea:bd:32:7e:90:77:8e:37:be:5e:af:a7:23:63:89:24:57 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tennesseesearch.jobs
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ea:bd:32:7e:90:77:8e:37:be:5e:af:a7:23:63:89:24:57Serial Number (int): 428326703859616328987327026367285131027543
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 5a:9a:fa:c5:69:59:82:b3:82:cc:48:96:45:72:29:56:a0:17:94:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1a:dd:b9:ea:90:8c:43:32:f5:eb:ab:56:ab:a5:6a:01:d3:51:8f:12
Fingerprint (sha256): 00:18:72:b3:1b:f9:cf:50:39:b2:42:7b:ee:fa:09:4c:98:f2:69:de:5d:2e:a5:5a:8c:19:eb:ec:14:d2:9a:57
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.tennesseesearch.jobs
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tennesseesearch.jobs
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.tennesseesearch.jobs
Other certificates including the domain name tennesseesearch.jobs
(limited to 100 certificates)
www.tennesseesearch.jobs
www.tennesseesearch.jobs
tennesseesearch.jobs
tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
tennesseesearch.jobs
www.tennesseepharmacy.jobs
www.tennesseesearch.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseesearch.jobs
tennesseesearch.jobs
tennesseesearch.jobs
www.tennesseesearch.jobs
tennesseesearch.jobs
tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
tennesseesearch.jobs
www.tennesseepharmacy.jobs
www.tennesseesearch.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseepharmacy.jobs
www.tennesseesearch.jobs
tennesseesearch.jobs
tennesseesearch.jobs
Certificate
The complete raw certificate details for www.tennesseesearch.jobs in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEzCCBPugAwIBAgISBOq9Mn6Qd443vl6vpyNjiSRXMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMTQyMjQxNDNaFw0x ODA1MTUyMjQxNDNaMCMxITAfBgNVBAMTGHd3dy50ZW5uZXNzZWVzZWFyY2guam9i czCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANc2yf8EMfZIKI6NRM43 1+OCldWZhomjDLRNnCIVal8wO7r8CVejxSQn8lZCYwyNDrl69MQ1jPF7FjA0az0v 5SEayk3Yw+32xwJzvK9kJ17kUE/nST5BONtXq/QRNlkxyX8uz5++tjHoedpbd7Uu shuNGNMiyct5SvBnGgYD1G9IfppmM+TjmhENHNOP2FmiTQ6R0tW773wKqGsZdZs5 PAJIJKSzJMGUxrZwKV/OHGQGJ37U+GN0VyXVjujAKudds7vXZ0E4RtmuxvFLuBXf fJMs7UpYAgrHSZOov/mnDNNNqaa6QbA8dhVLL85pmvbxw6nUo81ax5iWOLwq5LiG 9vPhWkBbwJ45ksIwDWbEGH0i0Xok/pGl4dk5QTzgLxvRxyPJbXNjeia14O4DuMxw Hg6ksLFYrryg2E/NKXQjqD/gpaETy9yj6XoH/qFwkVeH+6IJtO9jiVuEConEIRsU b7/roHy2q7t2XmLuI8KBexWvrWi1ULWoiePOCR2Y3xLO8LUDfUiJ8lplGshGBbDj CuQp71j26hDFUMk324ORdEyeL6oyfeeBpxEFujLVtQ+w/+soG7H0igviCBi0ulgT X9avDyo+oPDILeej0WDYy7KypYJqxb5r+of6Ow2565nYGBaM+6u/HggCpBuT6Yyw PgWm7IVXyjB8WGzz+EaGRKqjAgMBAAGjggIYMIICFDAOBgNVHQ8BAf8EBAMCBaAw HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFFqa+sVpWYKzgsxIlkVyKVagF5SgMB8GA1UdIwQYMBaAFKhKamMEfd26 5tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDov L29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDov L2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIYd3d3LnRl bm5lc3NlZXNlYXJjaC5qb2JzMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsr BgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlw dC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25s eSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4g YWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQg aHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQEL BQADggEBACFtCP68XFgOs4XwoqM+D93oal9yBdRdKoXKy/cazJlVR0hWbPAVqIg6 nIJKUKhdAleL4v2U4YrJOjFnwdtBsAFOBY7CchbRjEiEBIsgU3xVga2FzTt+M+BH xqi+rvg/aNHBrkaGVGI7y7wp3kDyf2Vs6vuhWpdVpmfoS0UEt9mvxDrB1DTnSIYH Kd4tt/e7grKkSESl4b5llHpOu3FI2lDWkDTRhfM9RNj54HxqStrEGuGjGtMAZbLd EyAVPsYMyVyymNDui1tCRDq+XoszIRLVuyIcXnJRQgQ1RGSB2RT3U2J9gPOqzlPZ 58s+7qmW2f3RAMaIr86UMTsLZwuJplo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1zbJ/wQx9kgojo1EzjfX 44KV1ZmGiaMMtE2cIhVqXzA7uvwJV6PFJCfyVkJjDI0OuXr0xDWM8XsWMDRrPS/l IRrKTdjD7fbHAnO8r2QnXuRQT+dJPkE421er9BE2WTHJfy7Pn762Meh52lt3tS6y G40Y0yLJy3lK8GcaBgPUb0h+mmYz5OOaEQ0c04/YWaJNDpHS1bvvfAqoaxl1mzk8 AkgkpLMkwZTGtnApX84cZAYnftT4Y3RXJdWO6MAq512zu9dnQThG2a7G8Uu4Fd98 kyztSlgCCsdJk6i/+acM002pprpBsDx2FUsvzmma9vHDqdSjzVrHmJY4vCrkuIb2 8+FaQFvAnjmSwjANZsQYfSLReiT+kaXh2TlBPOAvG9HHI8ltc2N6JrXg7gO4zHAe DqSwsViuvKDYT80pdCOoP+CloRPL3KPpegf+oXCRV4f7ogm072OJW4QKicQhGxRv v+ugfLaru3ZeYu4jwoF7Fa+taLVQtaiJ484JHZjfEs7wtQN9SInyWmUayEYFsOMK 5CnvWPbqEMVQyTfbg5F0TJ4vqjJ954GnEQW6MtW1D7D/6ygbsfSKC+IIGLS6WBNf 1q8PKj6g8Mgt56PRYNjLsrKlgmrFvmv6h/o7DbnrmdgYFoz7q78eCAKkG5PpjLA+ BabshVfKMHxYbPP4RoZEqqMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 428326703859616328987327026367285131027543 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-14 22:41:43 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 22:41:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tennesseesearch.jobs' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 877996598892257772790648855900073758803986424906115243491114267556461875272555925777278848855024252708607495575347617964108533182502817604315844187599620908875581944340863826252845491687414008842191115245142750505156352235374726948144563535985053716821189417165571436776408633954284115827470274197716850886636580096586431867390007960307683163922957713103819868206627324980449109426517278765508060333651663575760585416108929316201783624646720032722751604873068310002250764546185276231348100637288930960415384110827671692657963808750838262341640566805392613947090261078292248006575215429264763528208223416999862098645043177771304391653645089366365547109642052722801733735698360248719668029617131674830650333471108079752007948912947685158768675903101931262745734846552072214554638697567394725129977785520323798807635977197894099395615847048616262048049435842901622660277617791778863063003496040931770031314877006576030183090203033850535050560831862569071313025800106552220407618432136150134779742819562790661824225903771266266449503380560987711854154935786953191216970776016284977648213476088582805119382821721702172942380840489566599032384309149925557337731089513813298445241317716031765954011532332399219361948639177617182896255445667 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5a9afac5695982b382cc489645722956a01794a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennesseesearch.jobs' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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