support.jumio.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:a0:5b:e5:04:93:e2:87:fc:b3:e5:aa:d0:71:a3:1b:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=support.jumio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:a0:5b:e5:04:93:e2:87:fc:b3:e5:aa:d0:71:a3:1b:c3
Serial Number (int): 267334811656310887069877444953231209995203
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:37:e9:09:44:03:e8:79:f9:0e:a8:f9:c6:6d:9a:00:b0:07:75:55
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 27:7b:19:e0:cb:60:99:6e:c7:04:1c:19:95:d5:e8:00:9a:1a:f9:c4
Fingerprint (sha256): 10:19:93:8f:e9:b9:3f:77:df:2f:50:f9:23:d9:ba:80:48:34:d6:b4:1c:e2:34:fc:4b:e1:b5:73:99:2d:f9:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate support.jumio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for support.jumio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

support.jumio.com

Other certificates including the domain name jumio.com

(limited to 100 certificates)
backend.omega.onappcdn.com
*.r.worldssl.net
1251312415.rsc.cdn77.org
monitor.jumio.com
jumio.com
monitor.jumio.com
rsc.cdn77.org
*.jumio.com
distribution-status.rbb-online.de
backend.omega.onappcdn.com
*.r.worldssl.net
monitor.jumio.com
*.preprod.jumio.com
*.netverify.srv.lon.uk.dr.jumio.com
backend.omega.onappcdn.com
statuspage.io
status.jumio.com
backend.omega.onappcdn.com
jumio.com
statuspage.io
statuspage.io
rsc.cdn77.org
distribution-status.rbb-online.de
backend.omega.onappcdn.com
statuspage.io
*.r.worldssl.net
*.r.worldssl.net
backend.omega.onappcdn.com
statuspage.io
support.jumio.com
distribution-status.rbb-online.de
backend.omega.onappcdn.com
monitor.jumio.com
statuspage.io
distribution-status.rbb-online.de
distribution-status.rbb-online.de
*.central.jumio.com
monitor.jumio.com
jumio.com
backend.omega.onappcdn.com
statuspage.io
monitor.jumio.com
www.jumio.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
www.jumio.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
statuspage.io
statuspage.io
*.r.worldssl.net
backend.omega.onappcdn.com
static.jumio.com
go.jumio.com
*.core-eu.jumio.com
statuspage.io
mobile-sdk.jumio.com
distribution-status.rbb-online.de
distribution-status.rbb-online.de
go.jumio.com
distribution-status.rbb-online.de
*.core-us.jumio.com
*.core-us.jumio.com
*.core-us.jumio.com
distribution-status.rbb-online.de
dropzone.jumio.com
backend.omega.onappcdn.com
distribution-status.rbb-online.de
*.jumio.com
statuspage.io
backend.omega.onappcdn.com
backend.omega.onappcdn.com
backend.omega.onappcdn.com
statuspage.io
distribution-status.rbb-online.de
rsc.cdn77.org
vcenter.int.jumio.com
statuspage.io
statuspage.io
monitor.jumio.com
backend.omega.onappcdn.com
distribution-status.rbb-online.de
jumio.com
*.r.worldssl.net
monitor.jumio.com
birddoghrstatus.paradox.ai
backend.omega.onappcdn.com
*.houston.jumio.com
support.jumio.com
*.r.worldssl.net
statuspage.io
statuspage.io
jumio.com
support.jumio.com
rsc.cdn77.org
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for support.jumio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267334811656310887069877444953231209995203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:45:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 23:45:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'support.jumio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706224461533201338843311934070445396457944011165570783094833270387773948368188774467993598860097273292450923734521232474689192050706219046485975448502760377788789241134581970697406899058183351354473170511510664050879224603571640421655983598145770781741279292286316848113666257547168627361559254146904732435304638451551397727379004729885795917206195506642103349702282334899403399125133394696939374177317072836607939903712574309807778684601384778780732408544272035390987295483232757983777410265247246692950582090055370060511267825380772481161070499713200281498389583291939668766306756982494946205989480490282920527152613022511598760944161573296918132730525116661281525373260820240550085125638169595506672960617700358460981914803312275770119913421354320106462559433382074266622155806726748062211198926440863039026461035092580638042995193446547299129366769483088565986628773223768655872107039042033638254258637423338484615661795805077956493603848682834608601868451836039491919507325749831226532663511717897940324018855684488328821466592922011373093184516348985482197731694033863955843834956547293674394205457878400711403453053188619772271847236154504570102986551191135592972549764345146484215787275089210868785151249683704890199026728029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5637e9094403e879f90ea8f9c66d9a00b0077555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.jumio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f4f1dbf60000004030046304402202c47a1fdc870b755bbc9fb15c207a9b349e9ad230535a51a3681ba88106652de02200638a1975dd9da9735bd91ea05150adfb1423c51562bb5da5fb9a7813d1ca790007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f4f1dbf590000040300473045022100afbc11ac64956863e758dc5de83a8a99f8b34d8a9bff9dc72e8d0dd5fa6c96a702205188e5ba40d83d81d688b71a09d688eba8f6b6617780d8049a4c309172223970
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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