techlivecommunity.dowjones.com

Issued by R3

About this certificate

This digital certificate with serial number 03:39:af:2c:c8:be:a9:d5:ca:ee:4c:2c:e1:52:49:4a:6b:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=techlivecommunity.dowjones.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:af:2c:c8:be:a9:d5:ca:ee:4c:2c:e1:52:49:4a:6b:46
Serial Number (int): 280965800141686201201675410512449226042182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:fc:14:63:ed:58:02:c3:4b:c0:a2:37:7b:c6:e4:aa:33:50:e2:4f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): dc:9b:75:0b:7d:ea:2d:e6:98:6a:1e:38:3c:5b:f8:ea:09:d6:81:1c
Fingerprint (sha256): 0a:3e:af:59:05:10:6b:69:72:71:51:29:6c:92:de:01:ec:3d:5a:59:db:eb:f9:9c:bd:cd:7c:7b:a2:fe:5c:7f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate techlivecommunity.dowjones.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for techlivecommunity.dowjones.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

techlivecommunity.dowjones.com

Other certificates including the domain name dowjones.com

(limited to 100 certificates)
int.fis.dowjones.com
djce.dowjones.com
teammail.dowjones.com
suggest.factiva.com
logintemplates.identity.prod.pib.dowjones.io
developer.dowjones.com
app.online.dowjones.com
sso.dowjones.com
brand.stg.dowjones.com
accounts.dowjones.com
suggest.int.factiva.com
imobile.dowjones.com
widgets.int.dowjones.com
signin.dowjones.com
techlivequestions.dowjones.com
jobs.dowjones.com
sso.accounts.dowjones.com
provider.staging.dowjones.com
djrc-fmt.dowjones.com
integration.beta.dowjones.com
fanso.dowjones.com
djrc-fmt.sit02.dowjones.com
riskcenter.stg.dowjones.com
token.dowjones.com
a1.widgets.beta.dowjones.com
utilityhandlers.stg.factiva.com
accounts.dowjones.com
riskreports.stg.dowjones.com
venturesource.dowjones.com
view.email.dowjones.com
fanso.dowjones.com
riskcenter.int.dowjones.com
ssl.wsj.com
a1.widgets.dowjones.com
truesightdevdashboard.dowjones.com
dmi-api.datamgmt.int.pib.dowjones.io
opstest.dowjones.com
a1.widgets.dowjones.com
test1.dowjones.com
djrc-ei.sit01.dowjones.com
*.dowjones.com
djrc.sit01.dowjones.com
DJREDIRECTOR.INT.DOWJONES.COM
djrc-ei.uat01.dowjones.com
legacyapi.web.int.pib.dowjones.io
sso.dowjones.com
ssl.wsj.com
signin.stg.dowjones.com
fis.dowjones.com
int.fis.dowjones.com
djrc.sit02.dowjones.com
teammail.dowjones.com
WWW.INT.DOWJONES.COM
ssl.globalfood.dowjones.com
fis.dowjones.com
pevc.stg.dowjones.com
alertbus.dowjones.com
riskcenter.beta.dowjones.com
llnsubscriptions.dowjones.com
identity.dowjones.com
djrc-batch.eu.stg.dowjones.com
a1.api4.beta.dowjones.com
classad.dowjones.com
conferences.dowjones.com
stg.accounts.dowjones.com
cdsbk.dowjones.com
brand.dowjones.com
a1.api1.beta.dowjones.com
djrcfeed.uat01.dowjones.com
djrcfeed.dowjones.com
*.api.dowjones.com
a1.api.dowjones.com
www.dowjones.com
djrc-ei.uat02.dowjones.com
origin-global.factiva.com
sso.int.dowjones.com
djrc.uat03.dowjones.com
get.stag.dowjones.com
aramark.ewb.dowjones.com
widgets.dowjones.com
utilities.dowjones.com
djrc.uat03.dowjones.com
riskreports-global-api.virginia.int.dowjones.com
brand.dowjones.com
customer.int.factiva.com
sso.dowjones.com
cdlon.dowjones.com
djrc.uat03.dowjones.com
mats.dowjones.com
jobs.dowjones.com
sso.int.accounts.dowjones.com
api.beta.dowjones.com
secure.integration.beta.dowjones.com
visit.dowjones.com
riskcenter.int.dowjones.com
masterclass.dowjones.com
*.stg.dowjones.com
techlivecommunity.dowjones.com
partners.wsj.com
pay.dowjones.com

Certificate

The complete raw certificate details for techlivecommunity.dowjones.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/TmEbR0RuJK2PHo2JOT
Nc9XaBQSAtTYWrd8C48WTEbX0l6BGmd+D7vhfo9uCBwdjxkubpZLH3m6R0K6Gnyg
W2I2q2cP5jztfhtR8P3W6Jt3NB0frIQK9nJ91BjXVG0hyF/50LWrVD+JOGYxWhmN
kXUvdWpk37zk/JIFYZR8Qaf15uh+B38DTSaHSCsESmr4b/bI9rmpHhS9Uq2SIbC/
v5OOIbC5xZbya9sdZ4FvHGRDtNMMJRlvJR3KmGUJYQun4GIdfpFnwuCr2TjbxECv
u+DOeT40InH12hWud2s2X970nPsUu9PcbV0dSbckZDGtjvfYcL+nfMmZCJJxDZI3
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280965800141686201201675410512449226042182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-10 17:47:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-08 17:47:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'techlivecommunity.dowjones.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20192654543286079898888164293296901470915691694023332940939971576555580641225033283223285500539675339236824496511201589567147862765632321460860887485494648924119600802190069126132937250031549609236190726881669168731001445544318392123508314472216469641142932801018536703893881276424030692964800753641484863478699273776981022533988619510917787114256234526782849973667413099241541808731391872766432377950197830496724664678571886512760749358594590094207663063913160632888328577329985012549435040483034899087746819733247979886640051238849043849605235086952588519227619053919531146860271063155348790548146034718273950594911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3fc1463ed5802c34bc0a2377bc6e4aa3350e24f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techlivecommunity.dowjones.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c6b87d19a0000040300483046022100c90c962baf755b072815463463dd7035348e9a5a386bcf1373d45e3749e0ba39022100b4f847448e6090c0bb9484bfc0c8eb6f9a42e90afb376c72f08e84e766e62adc00750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017c6b87d1c400000403004630440220786f7faa6b315f44779d67f839e8b7aafa7f88c6220608517af268428074508d0220297cb7560f2a6919e4a444f592e93b0112b7f10d7f59b9920b740a0487639d6b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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