jurismagazine.duqlawblogs.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:e4:c6:b1:40:2f:99:b4:a9:1c:d1:e2:b5:f0:79:58:ea was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jurismagazine.duqlawblogs.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:e4:c6:b1:40:2f:99:b4:a9:1c:d1:e2:b5:f0:79:58:ea
Serial Number (int): 362704816423688248164902604219161633183978
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ae:a9:d0:8e:b5:18:b7:2b:b7:55:91:75:0c:fd:c5:9d:65:a9:66:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 84:89:37:78:94:fb:00:6e:0f:b3:4d:cd:42:7c:1f:78:89:86:eb:a1
Fingerprint (sha256): 0f:7d:cf:88:6a:ac:9f:5c:01:cd:25:40:91:d0:93:28:30:b5:2f:21:fc:66:27:f6:07:d2:4b:1a:31:bf:22:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jurismagazine.duqlawblogs.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jurismagazine.duqlawblogs.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jurismagazine.duqlawblogs.org
sites-law-duq-edu.duqlawblogs.org
sites.law.duq.edu
www.jurismagazine.duqlawblogs.org
www.sites-law-duq-edu.duqlawblogs.org

Other certificates including the domain name duqlawblogs.org

(limited to 100 certificates)
webdisk.duqlawbookclub.org
duqlawblogs.org
www.paconstitution-org.duqlawblogs.org
duqcrim.com
sites.law.duq.edu
duquesnelawreview.com
paconstitution.org
jurismagazine.duqlawblogs.org
duquesneblj.com
duquesneblj.com
duqcrim.com
paconstitution.org
duquesnejurismagazine.com
duqlawblogs.org
duqlawbookclub-org.duqlawblogs.org
duqlawblogs.org
acllib.org
duqlawblogs.org
cpcalendars.duquesnelawreview.com
duqcrim.com
sites-law-duq-edu.duqlawblogs.org
duquesneblj.com
sites-law-duq-edu.duqlawblogs.org
paconstitution.org
cpcontacts.dbliblog.com
duqlawblogs.org
duquesnelawreview.com
www.duqlawbookclub.org
duqlawblogs.org
paconstitution.org
mail.dbliblog.com
duqcrim.duqlawblogs.org
sites-law-duq-edu.duqlawblogs.org
duqcrim.com
acllib.org
duqlawblogs.org
duquesneblj.com
sites.law.duq.edu
acllib.org
paconstitution-org.duqlawblogs.org
mail.duquesneblj.com
sites-law-duq-edu.duqlawblogs.org
paconstitution.org
duqcrim.com
webdisk.paconstitution.org
sites.law.duq.edu
paconstitution.org
acllib.org
duquesnejurismagazine.com
acllib.org
duqlawblogs.org
paconstitution.org
sites-law-duq-edu.duqlawblogs.org
duqcrim.com
duquesnelawreview.com
duqlawblogs.org
duquesneblj.com
duquesnejurismagazine.com
mail.duqlawblogs.org

Certificate

The complete raw certificate details for jurismagazine.duqlawblogs.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mgAuKS/QKgi7ITOgO76
hvF3Q8yR4y1eQEt6Z9fyypDQVBIa7c0IGJsKtcmpMZntATEshYy/NrHlwCQDK7pr
5cK96W/WWk6uBjNYruvllZlu8nrrgtc2dtyv0xLJWyB31NhkyS5MNHrIEk/nP3G6
X9yVOcxn/aOQPg96pXikVt+EpB5mqyQMqI0H/gsFxlOdrRjY6jdMIx/CGEVN+2jJ
LoMq8SC8J6VvaQK+W6u6ztCcptDMdZGkyqKT1kLvovOYp7uTsxcrNU5+IUtUwdvQ
iV6d2ZI/MW+e1oCxML2Hz50hfN+YEjBd51Gg+mocFMY79wUEp/AtK/1OQb9t/uZc
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362704816423688248164902604219161633183978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-12 21:12:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 21:12:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jurismagazine.duqlawblogs.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29086095842915850359259946501681909761872122220467907227317113328417400167269282864550496479316527350473642717693894980681142802360529259154957761746563289165972820676807523586287550242405478800526978314085009767831203268721278663348874992552204092213849452233186041350002561202047627741003353266866165264535763901253378813017234328584386445188154881366161215719937247533000206236819098639456398571179364728875032933273045166685631524690699197485319237158817811498086722510796478422459911490518147356918323803199848537101503981782128502393889885323742557679151968044891658214841154947525712673193140652752998817488111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aea9d08eb518b72bb75591750cfdc59d65a96668
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jurismagazine.duqlawblogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites-law-duq-edu.duqlawblogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sites.law.duq.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jurismagazine.duqlawblogs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sites-law-duq-edu.duqlawblogs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e61ad5410000004030046304402206352bf760d37607654b6ec83bfca8ca32afccb1d4f93630697914acb9feb0f2c02207546ff777cf574beb9ee347e048d2c3e44ae023aecd001b1bac0386505d12f9f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e61ad5437000004030046304402200757ff67306448e5a09ba327a3c182d5b493b432647af6fbf6c1776d51fb595902200acca7a71d31449f139e95c236e94301d892f8da5531fd1a74e6938b66a78c56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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