jtrans.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:fd:53:c1:6b:6f:70:e9:4a:a9:c4:ba:b8:2f:63:d5:6e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jtrans.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:fd:53:c1:6b:6f:70:e9:4a:a9:c4:ba:b8:2f:63:d5:6e
Serial Number (int): 336195425717556061776157893515896114369902
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:34:5b:c2:74:57:c4:66:2a:86:c1:c7:ed:0b:86:a2:7f:2c:cc:0d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 60:a6:8c:7e:b9:df:d9:88:39:ba:c8:0b:54:6a:f4:9a:b8:87:b2:ad
Fingerprint (sha256): 14:4d:d8:6d:b5:a0:48:7f:ac:c5:49:79:a0:3f:b0:99:c4:ca:1b:3a:08:a5:72:01:77:96:0f:ae:95:1b:62:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jtrans.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jtrans.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jtrans.co
www.jtrans.co

Other certificates including the domain name jtrans.co

(limited to 100 certificates)
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
cs.jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
forms.accelerategtm.com
jtrans.co
sni240870.cloudflaressl.com
register.pawsatpeacecremation.com
jtrans.co
sni240870.cloudflaressl.com
jtrans.co
www.areademarketing.co
jtrans.co
www.areademarketing.co
jtrans.co
sni240870.cloudflaressl.com
blog.jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
www.areademarketing.co
jtrans.co
blog.jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
cs.jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
cs.jtrans.co
www.areademarketing.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
cs.jtrans.co
sni240870.cloudflaressl.com
cs.jtrans.co
jtrans.co
blog.jtrans.co
jtrans.co
jtrans.co
jtrans.co
cs.jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
cs.jtrans.co
forms.azu.ae
www.areademarketing.co
blog.jtrans.co
www.areademarketing.co
jtrans.co
sni240870.cloudflaressl.com
cs.jtrans.co
www.areademarketing.co
blog.jtrans.co
sni240870.cloudflaressl.com
jtrans.co
blog.jtrans.co
www.areademarketing.co
sni240870.cloudflaressl.com
cs.jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com
blog.jtrans.co
sni240870.cloudflaressl.com
blog.jtrans.co
jtrans.co
sni240870.cloudflaressl.com
pesan.jtrans.co
jtrans.co
sni240870.cloudflaressl.com
blog.jtrans.co
jtrans.co
jtrans.co
sni240870.cloudflaressl.com
jtrans.co
sni240870.cloudflaressl.com
sni240870.cloudflaressl.com

Certificate

The complete raw certificate details for jtrans.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336195425717556061776157893515896114369902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 03:30:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-21 03:30:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jtrans.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1037152852519589573284071520383094504055732174319540027455964276040873787941915607675318722421172537475953843191294688705848639268510688682439199651886863808229561344655725383642220560287235751774675395331148586175589527195180192557127559068907749995002671986168108477352489711517539075238183509085779089884683832806345259796074472455727466444485251865999507556281548463360136923734893618628393343412232127124018799652302806190319685731100789101970734826512383405317324215111942754294984056637932803709106668580692239111780826447875966820953444463480668083102789365209737017314839535123681110248699616226297022071345657775092754909196340950431739047170716186188218201979681293448411164356466281995561106725635647708118289401018369707522681515377269581967574199020570129851661118451506860533917275336328076453892252570307841617286914556841276074651204042354392596851942511204284849195125243565006142777525965711897519480059390055424740154773144013379056457126475039900645348963757442319068739202825434040823602425248233668843757073689749370975192028347111181459549121103592505742495903286830693816341841510460911935237869668900527995074640420823300580020806645364294817156854339032876829103518025276512072085616254016348440797788935739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5345bc27457c4662a86c1c7ed0b86a27f2ccc0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jtrans.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jtrans.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706602e7a800000403004630440220719d52d5c6d4db1422fa7bc8c8419a40913bb26735cf7e1a2c0e4ca044be32a302204c2cead3f694747133335ce131cef71409a080310b58179ec563768375f76d820076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001706602e9040000040300473045022068b3af4db416cda8c526966d825d2c50734aa733593561e8654ab79c10629c46022100ba7b0da58d9200141694d7a7e9fc2a89c9490c25745438a28714424aa3fdd5dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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