josslyn.biz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a6:8d:c3:92:da:bd:80:9c:5c:99:1a:41:d4:55:af:d4:5d was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=josslyn.biz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:8d:c3:92:da:bd:80:9c:5c:99:1a:41:d4:55:af:d4:5d
Serial Number (int): 318012167328011802013270839950833206940765
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:a4:3e:65:af:4f:a7:e6:22:58:71:1c:b6:56:04:cc:a9:55:41:4c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:c2:12:4c:9d:80:0d:47:62:bd:1f:2d:67:38:e6:b4:ba:41:67:d4
Fingerprint (sha256): 08:c4:c1:55:f2:23:f2:5d:1d:19:32:23:b5:e2:43:8d:13:ca:04:6b:f4:76:7c:20:7e:38:7a:c2:be:02:6d:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate josslyn.biz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for josslyn.biz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

josslyn.biz
www.josslyn.biz

Other certificates including the domain name josslyn.biz

(limited to 100 certificates)

Certificate

The complete raw certificate details for josslyn.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISA6aNw5LavYCcXJkaQdRVr9RdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMzEyMjAyMTZaFw0y
MDAxMjkyMjAyMTZaMBYxFDASBgNVBAMTC2pvc3NseW4uYml6MIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEArqs8Z2Xtk3/Ghg2xOjO2H4z2SyAanlGsCp2m
3IYIR7VFKr2SA6U/A0uHRMLjBhPr6v28m20Oebvt3lUSm5zPuz7++RFs+DxYUXfT
6ewI/Glqr9wdjUBmi4lpleonSG1foqTVlt9pGyLeJPux1T3bcwUqY7yGxd6F0OBx
P1cxe46QJQbmCNrR/aOgKYXMQE21XfmMEMFrTB6WuaRWqS3ON/w6eAb4cS1qmBwu
jVmtvwSOsAxiLf7CDmaJxhLC7CNT2ZAHNGE9VASavKiYpbTBkNRuKYp9ftO3nCWj
FTp6TvEIPZtBoWUJltlI079DMZIUwLx930+DWTMOcWHmLF5cJhgmmJVHMaqCvWSC
zHukpG2ga1qHay/n0CAzspuApn8X5BIiUQsfwdR3z1oO3+X1obMeQGOsLclf7Bhw
ki7VWTMAfuqdlJptLE9cVXSH4f4beMCUHP4dnTe8aCRK58ektJ97jQJabX6+bG7s
20TD99g37Fr1J7w6g5jfCGB29UYSdbzinvR50iMMDn/epOyY1LGBAsoJzJfwVTAi
K/DPMVBjb7rmBKN2Pu+k2mbNvUm2QLiYr9zcCKZ1fgkGTzK9yHCbHZrLM+EQkru7
nuq9iVGXZjrjx8laTSiZn8vxPPk88OD6GXruMKr4GRVaqeMBlZ8BKE/DxjJJPAuO
KGBkqpMCAwEAAaOCAnEwggJtMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUFaQ+Za9P
p+YiWHEctlYEzKlVQUwwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAnBgNVHREEIDAeggtqb3NzbHluLmJpeoIPd3d3Lmpv
c3NseW4uYml6MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+L
kF4AAAFuJA4hPQAABAMARzBFAiBx15JDyM6tSF2YFs/P84WBYGBMK8AWZRCf24Ve
FInp4wIhAODkafOem//s38hF9uHSyE9RuqXVSR89H6A/fL/nNC8qAHYA8JWkWfIA
0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFuJA4jawAABAMARzBFAiAFsPo2
LTyLgilNzIrEejRapaqh2pp1RFrlcnes+t1MxwIhAOigkGZKfam7yV5LhTvvvdyr
tyYLsmJxU7eFQn5/74IVMA0GCSqGSIb3DQEBCwUAA4IBAQCUMAJc8vBvb9m9kSQ6
ISKAEFN7p+YJSs4htKnmnzpOkwnIOYXs7M/f/+szqen07WlrPzN8PsudclxzQj+R
YeKRlwTro9I2VEpO8dp6OiFtIkAK3ZC+xUpx3j1/2lEBiRXVJ/8PcAr0Lxnm1FdJ
zNih5nl+EHMO1pWlAY2LSiLK1igoE8v2X0KC8vVX7xphmQe0LiFNmh16O3GGCBSj
87iDASfkJOj3juM0qDXXq//fGl1/gGshGjMUKRhDhJGDM+lMePIUZ7/sj0kIiIHN
944UIA7S0i+600SZHD85mP97oubVBDdkUG7yqhfzcOlJC5NCu4VXuMyPhMlZV1e4
Oi0A
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318012167328011802013270839950833206940765
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-31 22:02:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 22:02:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'josslyn.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 712586902752648196063717456448580975305863197106251766728406375113979150497081839635041346167074516927117909641017206436751562871373758485384074965968104455845500369385275057685733599521786624914207458547916439343898092999765963977437121845396420968306984178837597012987762908803694196619807719991746914430802192106303551194573817264879648216158349306557157908914323041153451958601004686926609802711901209722386009411415167198512405313432055962916967854842577279206492685301309422169056950830368137991828406508663489643568366505546188418140065800342053952717156906929369988850560091396180036828133392839426468292610664250817389586256435970331193717760022440702741825978676608455690670094540494431044748207699962071617827247621688611710190764401825388929515686993393627249883749424920916444564986294858067443229345229196871907987895403847593217521341556872667771638880487697177599589315283661948283749625210942838171029041992667298003767634870261904915738522289983055901933485745024743093435145767801164480064812159927605533817939253499608212738341341165659429161653160098431595758980647175642147703963146272215194985908477188648387310441312381144655478630492135088847637029175448065991770720586195323631850739217280130635775781153427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15a43e65af4fa7e62258711cb65604cca955414c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'josslyn.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.josslyn.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e240e213d0000040300473045022071d79243c8cead485d9816cfcff3858160604c2bc01665109fdb855e1489e9e3022100e0e469f39e9bffecdfc845f6e1d2c84f51baa5d5491f3d1fa03f7cbfe7342f2a007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e240e236b0000040300473045022005b0fa362d3c8b82294dcc8ac47a345aa5aaa1da9a75445ae57277acfadd4cc7022100e8a090664a7da9bbc95e4b853befbddcabb7260bb2627153b785427e7fef8215
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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