jnjmd.castoredc.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a9:ab:51:af:42:b0:92:6d:ea:e3:c3:55:4a:9f:b8:cb:c9 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jnjmd.castoredc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a9:ab:51:af:42:b0:92:6d:ea:e3:c3:55:4a:9f:b8:cb:c9
Serial Number (int): 319072299922949487949439356882260791446473
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:b0:9c:54:c9:d2:d0:3d:b9:66:b1:36:e4:32:75:8b:69:b0:f9:44
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f9:46:28:34:57:02:17:e5:19:96:50:e2:22:0c:ba:e1:12:f5:88:95
Fingerprint (sha256): 14:ca:74:14:e7:4e:39:c1:b8:2d:1d:f4:c3:aa:37:f2:36:e7:ec:25:73:0a:46:cd:92:b0:27:a2:1c:af:0d:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jnjmd.castoredc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jnjmd.castoredc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jnjmd.castoredc.com

Other certificates including the domain name castoredc.com

(limited to 100 certificates)
rc.do.castoredc.com
nl.castoredc.com
sebastiaan.do.castoredc.com
staging.castoredc.com
us.castoredc.com
pentest.castoredc.com
accept.ivoclarvivadent.private.castoredc.com
uk.castoredc.com
data.castoredc.com
adminsupport.maxwellhealth.com
metadata-annotator.castoredc.com
support.for-sight.co.uk
survey.sheshtech.com
alexey.do.castoredc.com
action.castoredc.com
support.gdkiot.com
sebastiaan.do.castoredc.com
support.cashpos.de
workshop.castoredc.com
sales.castoredc.com
www.castoredc.com
tsm.tableau.castoredc.com
grid-api.castoredc.com
staging-uk.castoredc.com
sms-demo.castoredc.com
staging.castoredc.com
guias.aerme.com
support.for-sight.co.uk
jnjmd.castoredc.com
helpdesk.polytra.be
pentest.castoredc.com
support.for-sight.co.uk
management.do.castoredc.com
us.castoredc.com
rc.do.castoredc.com
us.castoredc.com
ous-2018-027.castoredc.com
castoredc.com
alex.do.castoredc.com
fdp.castoredc.com
survey.eitep.de
annotator.pilot.castoredc.com
ivoclarvivadent.private.castoredc.com
support.for-sight.co.uk
management.castoredc.com
careers.castoredc.com
support.smartshift-robotics.com
castoredc.com
workshop.castoredc.com
pentest-azure.castoredc.com
management.castoredc.com
action.castoredc.com
support.for-sight.co.uk
surveys.lombardinternational.com
adminsupport.maxwellhealth.com
pentest.castoredc.com
us.castoredc.com
alejandro.do.castoredc.com
staging-us.castoredc.com
support.cashpos.de
survey.khaoscontrol.com
support.for-sight.co.uk
play.do.castoredc.com
jnjmd.castoredc.com
staging-shiny.castoredc.com
uat.castoredc.com
pentest.castoredc.com
www.castoredc.com
adminsupport.maxwellhealth.com
helpdesk.castoredc.com
sebastiaan.do.castoredc.com
staging.castoredc.com
careers.castoredc.com
staging-au.castoredc.com
dev.do.castoredc.com
www.castoredc.com
management.castoredc.com
adminsupport.maxwellhealth.com
staging.ivoclarvivadent.private.castoredc.com
support.cashpos.de
support.cashpos.de
ext.outsourceit.es
cybersupport.kpmg.com
accept.ivoclarvivadent.private.castoredc.com
staging.ivoclarvivadent.private.castoredc.com
support.monect.org
support.cashpos.de
td2.castoredc.org
dev.do.castoredc.com
castoredc.com
support.for-sight.co.uk
support.for-sight.co.uk
castoredc.com
ugyfelszolgalat.mediaguide.hu
staging-us.castoredc.com
helpdesk.castoredc.com
staging-uk.castoredc.com
survey.sheshtech.com
workshop.castoredc.com
careers.castoredc.com

Certificate

The complete raw certificate details for jnjmd.castoredc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOdPbI/h3b04iVmUUNmC
vHD8eiXXTp+YK6o+Prao51EF3qm3kq7unrKYjS6typAgy+gAeVEo34Vg89dmICm1
OJVQL52MABhAl0Mh86w7UVU+MVDldfeZ8tbNng9/otKiPg2jeA9PY3GgLpFG4S5e
XTGJ5fRp4tpGY/pcLLigwOuXT9cyWwPAx+2ZWv27SOA2aEWow10RU//hg0anOYBu
4s3asTUHqcQsR4tOFC9HFnCDcZUUPDBWRSwztlX2wlijdQt+fSXsMnzSQyyVV+27
7WXTeLYMRK7oPhyezQt4czvJkiUT6wCy+eeTjAdQvqUCL6S8Q+KqO74B9uTM1QG9
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319072299922949487949439356882260791446473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 23:09:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-12 23:09:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jnjmd.castoredc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21322098569907321475877763485909008131476325962027117392565391047046131820952847175729302275552368401936470424298336129549433723033751617865537804391020115697592001064510443794940808359282689753483947647791569731656984248020529095476374500647299479954001754223354719693779912382146459626629861945963633014234807457993548786059732068449765168449691997068259613070161260240961538868118933953102922802783425093492129828273425835170418271470168337931254838752977024623350936738253627754383347560684340283945906785333573156617332745889259893997419923064016361856052837665449826022368251092416449941381301077910126850063837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aab09c54c9d2d03db966b136e432758b69b0f944
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jnjmd.castoredc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f7994ef99000004030046304402203c2d959940ab8cf03482ae31030b4db91a11f920c8622c2a623bdeedc86edaf102207cc65a299a6bd965c14f621999634ea67f2f0bc9d6210ea2bb7c09024ab15f8f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f7994efa6000004030046304402203688699a673c8d2c3829b4985925dad142645448afaf29613ba2d055be52489602205b8554281e5ad80d721d98ddd6b738fbe1c3d5211dd2d3254bc32d6fbd27e4d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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