jira.cheekwood.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:13:ae:07:bd:57:f9:d4:35:ca:ea:59:e9:49:5c:64:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jira.cheekwood.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:13:ae:07:bd:57:f9:d4:35:ca:ea:59:e9:49:5c:64:6f
Serial Number (int): 335544572732596840597755086806954287064175
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:d8:ac:97:fa:a5:4b:89:47:be:d4:f0:6a:b9:d3:bc:4b:da:15:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:ae:65:89:26:d8:09:50:1f:a5:17:b5:ff:4b:9e:14:fd:f2:e6:3e
Fingerprint (sha256): 12:84:fc:29:a8:9e:05:4c:96:02:1e:22:26:8a:0e:6c:55:74:6e:96:8e:18:b1:78:ae:7c:9d:20:6b:d8:f4:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jira.cheekwood.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jira.cheekwood.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jira.cheekwood.org

Other certificates including the domain name cheekwood.org

(limited to 100 certificates)
cheekwood.org
remote.cheekwood.org
cheekwood.org
staging.cheekwood.org
jira.cheekwood.org
cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
images.cheekwood.org
cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
cheekwood.org
wiki.cheekwood.org
*.cheekwood.org
*.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
passwordreset.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
openvpn.cheekwood.org
jira.cheekwood.org
*.cheekwood.org
wiki.cheekwood.org
images.cheekwood.org
mail.cheekwood.org
www.cheekwood.org
mail.cheekwood.org
pics.cheekwood.org
xibo.cheekwood.org
docs.cheekwood.org
jira.cheekwood.org
share.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org
filecloud.cheekwood.org
www.cheekwood.org
wiki.cheekwood.org
xibo.cheekwood.org
www.cheekwood.org
openvpn.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
docs.cheekwood.org
wiki.cheekwood.org
cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
cheekwood.org
cheekwood.org
jira.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
www.cheekwood.org
passwordreset.cheekwood.org
images.cheekwood.org
wiki.cheekwood.org
www.cheekwood.org
cheekwood.org
wiki.cheekwood.org
mail.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
cheekwood.org
cheekwood.org
wiki.cheekwood.org
xibo.cheekwood.org
xibo.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
cheekwood.org
images.cheekwood.org
mail.cheekwood.org
wiki.cheekwood.org
docs.cheekwood.org
ec2.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
mail.cheekwood.org
*.cheekwood.org
jira.cheekwood.org
wiki.cheekwood.org
cheekwood.org
ec2.cheekwood.org
images.cheekwood.org
cheekwood.org
cheekwood.org
cheekwood.org
images.cheekwood.org
images.cheekwood.org
jira.cheekwood.org
jira.cheekwood.org
images.cheekwood.org
wiki.cheekwood.org
jira.cheekwood.org

Certificate

The complete raw certificate details for jira.cheekwood.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UtqZCad5TK1n4/NjlHF
urkZqkP0oB7uXMYnrRzFb6DW/3SXvwHBqIcbwpyxf1lLJLqt/xqKABTyFYhd2u+O
3jndOoy/QdgxaBecbEbbaGFRMgaQPF2/ZPjgWQCz6xsxIcQB2nNPeBhhR+B89g6R
e15FhyCb45/t7GFJdHyYf8nMuxXyOhQL36y9MafTE/wLo/hGGqRtCfvOJwOmkqWs
dmtrYVzUjUbEsO0GqbMx2WcOzhG1cfm/lHbtBIPfzbYBwm86iZgKE/s9fPMNT090
yJuUh5EBT/XKWG5V3nX/7Zq6bbb4TBrvQvbFHtpYlRN7kxojw97j3+Dby20apuDO
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335544572732596840597755086806954287064175
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-29 04:02:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-27 04:02:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jira.cheekwood.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26420994551716950452305296943012431059367957064315843901915553956932276639441518654949270172947214280722393046786588468528472732369153981472490774133068404383058963222137232782302779877186870378884532693499315759200678174541711771187188257576190666915937245943543215257392648949728419129593679803449978344719337896199171836247296706207848656100173093440636535432101445796923374088907580374762782677077757617815950111012311807680490658113623625150929002063702563442463036150758454759827538073253213944245252511161838155593362777218137398962921288893890292148046670343850338451555893335019717985377179942100495505608419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cd8ac97faa54b8947bed4f06ab9d3bc4bda153d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira.cheekwood.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163aa46fb950000040300463044022062273332ac18e4f19109a3750c6c4f79e3194fc591f41b68d7925155782906ec0220552cf7e18de6689ddb0642b1b1483bff972846d735d4ce9dfdcea2e65153fae6007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163aa46fba90000040300473045022022a8bd637529de99d404e37ff701f0aeee3d407b3bb24345b6137fd38f3dcec5022100bfadf79daaf5cd29e4e7bc5b4c194a45da86e2f70ceb4b45b0721370f27e19a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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