cjaco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:18:40:01:d3:48:3f:03:78:d2:34:03:09:d7:e4:cc:4f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cjaco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:18:40:01:d3:48:3f:03:78:d2:34:03:09:d7:e4:cc:4f
Serial Number (int): 278383209957247358316549419895411058199631
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 96:3c:57:6d:3d:f8:38:ef:59:52:2b:7e:9c:a2:8d:25:44:6c:6d:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:e9:c2:2f:70:40:4d:32:97:82:74:fc:84:c9:7e:1f:74:7d:fa:c6
Fingerprint (sha256): 11:54:51:da:70:22:b4:25:9c:e9:1b:e9:65:a3:35:b4:f8:7d:25:6c:ff:c0:40:5e:6f:d1:e9:e9:ab:50:ec:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cjaco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cjaco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cjaco.com

Other certificates including the domain name cjaco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cjaco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278383209957247358316549419895411058199631
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-25 19:28:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 19:28:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cjaco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671321903539416165177939312699747595596291666175428830971916989493697012569843170132643059790073494220953714095526572873842697116193460443091894240281737486819273549883308188278127167864746221924232592846491306245998375150327430154740143973697883770153333435105221100983605114244915618895057692828460615443725536384526642409838433443550769194333806820842660177655378960822666080701416898685210729426859397174699118646748430117326956131866965578312898835124446766195941282938624904265777151038025059126962940968833453212045575118996445406440494278929181581996126999130130254929813710650773931979003785588846905105074491000636528364191195060010052408809303662963055197833818586911988130624445203467943890644077305548985515148119302171598676971838640651595671429472903851211189947019450604370250359815285415996634514350508129379853402469806511509539007188521510002300600961636419546728996050167838159889785956626452060714151574979643913979731371644404038935282316367421840881916755761157143429545730291272609531098340732817680863710308850300342230767419639017345977621435835399132345155421857068703071203109325570699637470843350553372867467659489665109538623521108849619175954215926141194684351225523148517068300516398085227879636157663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							963c576d3df838ef59522b7e9ca28d25446c6d34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjaco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f3ebf5418000004030046304402204f3ed298695f0eb46151e2a772a963798844ac5709aa78c9c91d57e5bda8f6160220599602e00d8965847d2f15ba8f8112f761f14084c6f9ae06a041e4bc5210ac0e00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f3ebf543f00000403004830460221008561484fee61a696d736accade72a854e90daf98608a9491c01757e478daf34a022100c35c272afc3733a93a3dee41a0ff55c06a328c737228a4512a1b765c50440103
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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