jpl.ubiquitypress.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:99:b4:0a:52:ad:a6:42:a2:8c:1a:ee:ee:9f:dd:9f:f1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jpl.ubiquitypress.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:99:b4:0a:52:ad:a6:42:a2:8c:1a:ee:ee:9f:dd:9f:f1
Serial Number (int): 324833684748739469807332978160505418784753
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3e:45:7d:2a:5d:a2:a6:0e:87:65:4a:cd:4c:0b:53:87:5e:0a:56:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:57:60:48:cb:16:ec:be:46:2f:e7:72:c0:4e:67:d8:67:d5:0f:ed
Fingerprint (sha256): 06:1f:a8:cb:a4:29:d1:58:cd:39:83:93:5e:dc:15:9d:52:6b:5b:a6:ce:fa:d3:98:63:49:c9:a8:4b:df:f2:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jpl.ubiquitypress.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jpl.ubiquitypress.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jpl.letras.ulisboa.pt
jpl.ubiquitypress.com

Other certificates including the domain name ubiquitypress.com

(limited to 100 certificates)
working-papers.research.uoc.edu
cie.ubiquitypress.com
pjsl.ubiquitypress.com
jrcs.ubiquitypress.com
sjms.ubiquitypress.com
journalofmore.org
aa.ubiquitypress.com
fou.ubiquitypress.com
ijosts.ubiquitypress.com
www.psychologicabelgica.com
journal-labphon.org
luminos.ubiquitypress.com
www.sjwop.com
besl.sljol.info
anthurium.miami.edu
www.worldwidewastejournal.com
www.psychologicabelgica.com
www.culturalscience.org
ijc.ubiquitypress.com
jeps.ubiquitypress.com
besl.sljol.info
ijic.ubiquitypress.com
conference.codata.org
nsbmjm.sljol.info
jumr.ubiquitypress.com
www.sjms.nu
aa.ubiquitypress.com
www.sjms.nu
history-culture-modernity.org
gaj.ubiquitypress.com
joshhm.sljol.info
ubiquitypress.com
cg.ubiquitypress.com
www.utrechtlawreview.org
prodtest.ubiquitypress.com
jpl.ubiquitypress.com
dze.ubiquitypress.com
www.ubiquitypress.com
medenv.ubiquitypress.com
sljfa.sljol.info
www.comicsgrid.com
demo.ubiquitypress.com
coll.ubiquitypress.com
ajar.ubiquitypress.com
www.ssas-yearbook.com
entsportslawjournal.com
gaj.ubiquitypress.com
os.ubiquitypress.com
nsbmjm.sljol.info
healthpsychologybulletin.com
journal-labphon.org
wwwj.ubiquitypress.com
ijic.ubiquitypress.com
www.culturalscience.org
www.gewina-studium.nl
egems.ubiquitypress.com
www.ubiquityproceedings.com
www.19.bbk.ac.uk
datascience.codata.org
llpp.ubiquitypress.com
gsa.ubiquitypress.com
ajar.ubiquitypress.com
thecommonsjournal.org
journalofmore.org
www.psychologicabelgica.com
jpl.ubiquitypress.com
slvj.sljol.info
transactions.ismir.net
conference.codata.org
healthpsychologybulletin.com
history-culture-modernity.org
www.designsforlearning.nu
art.ubiquitypress.com
sim.openlibhums.org
ejmcm.ubiquitypress.com
sljm.sljol.info
blog.ubiquitypress.com
uksgs.ubiquitypress.com
junction.ubiquitypress.com
openhealthdata.metajnl.com
sta.ubiquitypress.com
ijosts.ubiquitypress.com
nsbmjm.sljol.info
www.dictatorships-democracies.com
www.worldwidewastejournal.com
thecommonsjournal.org
bst.ubiquitypress.com
rg.ubiquitypress.com
amsp.ubiquitypress.com
cjsbs.sljol.info
vtuhr.ubiquitypress.com
rnef.ubiquitypress.com
paahjournal.com
gaj.ubiquitypress.com
jccc.ubiquitypress.com
srjed.ubiquitypress.com
dscn.ubiquitypress.com
meliora.soton.ac.uk
entsportslawjournal.com
bhumi.ubiquitypress.com

Certificate

The complete raw certificate details for jpl.ubiquitypress.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4HDnw6rbs1MnKoGigb
v2dkhGuV27UP6YPu52EOZ8XxjkFVMRNm4YseYU+u9Nc+74IYFINrcMLKNJyAuwcr
oLkmIMlbFzLly9EnC/wfGbZn4BhQfmmoJfmq3malsCF/XDFdiPz0ixWyYRmzQVvg
oTWKmS++YiTT6NYJReqs/dtHD1j0+pk4wEzLOtzSGVRNAyywsPYXcClQNt9X9HFr
2etl2Pa//8Rez1mkHZK58VCBh35eQ6+HJBAuynD3PAzrYpNAmhA6vwjPkYTzSCKT
icb0b0QIV3L6Htv+iZIjwCWjVZzbfA5nuH2w6Ux7LxMRqhaWhUF/kLNW2kXa76Yp
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324833684748739469807332978160505418784753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 15:13:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 15:13:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jpl.ubiquitypress.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24789074493650697904709895495509560742516848130532938757099286639564779134451021377440958218079551639805531788959401470622023351190096791995697636281791466038701309310649874956019019407128143077951455527250231531062654199258813480872010411945617114693993448585563980124363856781093024535601388485060493194285336323680708919905302295889932645614177975086863644655018791408863510275586926053485050835458613891445226050013829164760969744550472619550183758003510308848028429602194466001462355324131085795299085180879387306559648836198311697238813097808231730019443451197228201888501391615121178073369394475444611622250831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e457d2a5da2a60e87654acd4c0b53875e0a56ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpl.letras.ulisboa.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpl.ubiquitypress.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a795279560000040300483046022100852d14cdddca08aaed2d184b01c611dcffbf724e0c5498694735f92d50f8c770022100a3ba2f11109488b319b2d03c1d3a1b8ef9cd3469868ad0fef7e096bc75c6570d007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a795279a3000004030047304502203410c63029754c901e1f1610819f8936b805abb44cce50c63a2a0e5947ab2db8022100fb1a04aa9924288cbb49b1959a1a7f90dbcbabeee4d93567137d0f981b78e9d4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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