jayride.org
Issued by R11
About this certificate
This digital certificate with serial number 03:ae:f9:25:c4:c0:45:ee:95:db:23:2e:e1:cc:53:4e:89:c7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=jayride.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:ae:f9:25:c4:c0:45:ee:95:db:23:2e:e1:cc:53:4e:89:c7Serial Number (int): 320877163516043974839638058901834394667463
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c7:10:ef:b5:fb:0e:87:92:0f:9a:d2:bc:88:2e:59:f9:21:c9:74:71
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9
Fingerprint (sha1): 49:99:b2:3c:f4:98:59:f7:71:b0:66:35:de:7c:4c:4c:19:13:62:a8
Fingerprint (sha256): 14:b3:57:fa:5e:45:d9:14:5c:d8:0c:ad:23:fa:b8:7a:a9:9f:f9:70:3f:e3:81:a7:9d:2c:78:20:18:a5:0e:43
Issuing Certificate URL: http://r11.i.lencr.org/
Revocation information
OCSP Server: http://r11.o.lencr.orgCheck the revocation status for certificate jayride.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jayride.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jayride.org
www.jayride.org
www.jayride.org
Other certificates including the domain name jayride.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for jayride.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgISA675JcTARe6V2yMu4cxTTonHMA0GCSqGSIb3DQEBCwUA MDMxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQwwCgYDVQQD EwNSMTEwHhcNMjQwNjA3MTc0NjUzWhcNMjQwOTA1MTc0NjUyWjAWMRQwEgYDVQQD EwtqYXlyaWRlLm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL2O F0/xjKEoaJ3IFZT4WoAXmB+VUbliFs6ulE3hrdPD+ajiwJaLsYGKuvUPWEkLoLPm b9tTryTGNtt4Ly2pNmfjlQljpMoDmv/HzTiADSqSK0ymczytbgaac2Zzle6dsT52 rVDNqNNgoIuU8S1Px/2+YwDe2SlThP+b7qCKfoW9qXPCQbtV1JNQccmnKmw6+iCV W8qbAGYdDTX+CUMFKj2X8+tc7iysADOrxh4zvYpo2NSQXobZf6W3+67V1v9tkmaA EfNR27b+qNP90BvNFGjb2FbRZEkNzVoF9Wl1oHOjJrJzPtj/aF0+ylO3ks8bDTYk LbxDmxjf0NEgZOHM6ZtjBO7sLxSlilxVSOHeiAlyT+L2hufZXKtmCCIMjwkeZgSM h853fXDxENzBxO9scX4Nzo5c3AKSa5eZXgRlfTDDEBFccpcmlcMylKP82RLeZDFm ZNdIerxfngr1eH8R5EGNakiLZ73PK9XSXh6a3biswwDhCKjGJdRCkgxj3W7LcF64 wlsKyCnUfVQMn3BZZKlZBR+0Dk3JC7UgyLPm5K8FWmdALMXHzFTT326YNymQjnJZ NU3F2369EDLdMIdqJ9VC5TYPVsUahr3aWxDlPpDUHLPzbSeJN9vqgh8X9ewgJVeZ VSb4l/5mZTxCLh3PMF9puNyT4hZeZBuYg9xG6i9HAgMBAAGjggIgMIICHDAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFMcQ77X7DoeSD5rSvIguWfkhyXRxMB8GA1UdIwQY MBaAFMXPRqTq9MPAemyVxC2wXpIvJuO5MFcGCCsGAQUFBwEBBEswSTAiBggrBgEF BQcwAYYWaHR0cDovL3IxMS5vLmxlbmNyLm9yZzAjBggrBgEFBQcwAoYXaHR0cDov L3IxMS5pLmxlbmNyLm9yZy8wJwYDVR0RBCAwHoILamF5cmlkZS5vcmeCD3d3dy5q YXlyaWRlLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE gfUEgfIA8AB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABj/QG b7EAAAQDAEgwRgIhAIcryQ+X3AelzruQ6Y0Z3NPew3YnIOWyvPTOd4+uufRDAiEA hmj8rSYMxNYu2uNb34KIu00u9rj16+14JwH8zbWNolEAdQBIsONr2qZHNA/lagL6 nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY/0Bm9eAAAEAwBGMEQCIHSZKli2gjSqJHqV fDaVGKxd7cj9vpJ5LENrGf7f0KmBAiB8WXjrNVhQxcZKhHOHwLAVKP9mg8C70KNk Qr/ySxEKhzANBgkqhkiG9w0BAQsFAAOCAQEAMcv54nrWFLYSuryr46KtAE4imCIA IfM3IupKtfDcbRG24FRTFD30Zk23Dnpx5DH3Vr4dMi/3A5wWBuPxgj8kaPvNTbN0 anizS7XCmMwgVLvYbP3DVy4HlKwzjIQfvcx1tpuHIc4PTdNBFsbLgJ74pq+k3q/p hfYjSFbxTXmv2KA5HM4xFZghmsqeFp5TkJgnlMcJ9Vz0w2q6EiWMUDQmEHb+JxSy inGEcrmKXhW2Cu/Ai4u7C1xQqyfOUQ//YX5cdEoh7hqqHU8jUenUeEaOWn5C34Kb rmOj4Toqn4d+wg+NBzUo1pqokD4wZHQCRhtqDlVqhXlX8XLMb2Yj7kHDpg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvY4XT/GMoShoncgVlPha gBeYH5VRuWIWzq6UTeGt08P5qOLAlouxgYq69Q9YSQugs+Zv21OvJMY223gvLak2 Z+OVCWOkygOa/8fNOIANKpIrTKZzPK1uBppzZnOV7p2xPnatUM2o02Cgi5TxLU/H /b5jAN7ZKVOE/5vuoIp+hb2pc8JBu1XUk1BxyacqbDr6IJVbypsAZh0NNf4JQwUq PZfz61zuLKwAM6vGHjO9imjY1JBehtl/pbf7rtXW/22SZoAR81Hbtv6o0/3QG80U aNvYVtFkSQ3NWgX1aXWgc6MmsnM+2P9oXT7KU7eSzxsNNiQtvEObGN/Q0SBk4czp m2ME7uwvFKWKXFVI4d6ICXJP4vaG59lcq2YIIgyPCR5mBIyHznd9cPEQ3MHE72xx fg3OjlzcApJrl5leBGV9MMMQEVxylyaVwzKUo/zZEt5kMWZk10h6vF+eCvV4fxHk QY1qSItnvc8r1dJeHprduKzDAOEIqMYl1EKSDGPdbstwXrjCWwrIKdR9VAyfcFlk qVkFH7QOTckLtSDIs+bkrwVaZ0AsxcfMVNPfbpg3KZCOclk1TcXbfr0QMt0wh2on 1ULlNg9WxRqGvdpbEOU+kNQcs/NtJ4k32+qCHxf17CAlV5lVJviX/mZlPEIuHc8w X2m43JPiFl5kG5iD3EbqL0cCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320877163516043974839638058901834394667463 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 17:46:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 17:46:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jayride.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 773317107624167085510646630833979032114425473018050785815465838002632577778739845926031719907390897321529546428361424706492421018021149988175963325259157501266069847908563041287615942433067846020569397224124781716739308306415052174407448562693933106300027741144221578904003673304382883164458574320956754728165460640973603352700601044860085431844143047303825139611968679707698858256102590097110666363586961749386013565147728863650486380665786282167987981459512865598896383284907308184653430690371230937659186190542190346549042206844601263578040888497772620293743336467632370248155345895457318782750305957870248221117714347715138022678405288014027315444517644474443723168100783968106631071839556264832378175173737702970594502520714732179439558149116587964638187191962344661396998364557574335228588452947501110952475508665556285901475068637863033637760243356867047058577543742336597737540872274452610174215040938161663331224450147751172882907048541413292569035751021296654925734756201887075323786900042115585692039975324894879747428594448188883562527033276550773690140585335046857079319188065622470567196199686883137646943083926898453113835383375703380227242716102450392572090043240399729592106445052793449455494409397773442382467575623 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c710efb5fb0e87920f9ad2bc882e59f921c97471 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jayride.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jayride.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ff4066fb10000040300483046022100872bc90f97dc07a5cebb90e98d19dcd3dec3762720e5b2bcf4ce778faeb9f4430221008668fcad260cc4d62edae35bdf8288bb4d2ef6b8f5ebed782701fccdb58da25100750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff4066f5e0000040300463044022074992a58b68234aa247a957c369518ac5dedc8fdbe92792c436b19fedfd0a98102207c5978eb355850c5c64a847387c0b01528ff6683c0bbd0a36442bff24b110a87 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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