jamestownsf.org

Issued by R3

About this certificate

This digital certificate with serial number 04:26:cf:3f:15:9b:ba:e5:db:e1:07:76:4c:6c:56:5a:f8:12 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jamestownsf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:26:cf:3f:15:9b:ba:e5:db:e1:07:76:4c:6c:56:5a:f8:12
Serial Number (int): 361655351418135022438520346604310676305938
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ba:9d:9f:ae:be:6c:bf:01:c9:8e:d5:ae:3b:9a:9a:0a:d5:3d:a0:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a3:ab:c9:79:68:27:81:06:c3:b2:48:bf:cf:22:79:e8:02:e1:85:5c
Fingerprint (sha256): 1c:21:1f:4c:4e:89:d4:a2:12:31:c9:1b:be:24:eb:c7:f0:42:ed:b5:ff:63:ad:53:f1:c5:53:d8:5a:f9:c0:6c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate jamestownsf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jamestownsf.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jamestownsf.org

Other certificates including the domain name jamestownsf.org

(limited to 100 certificates)
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org

Certificate

The complete raw certificate details for jamestownsf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgISBCbPPxWbuuXb4Qd2TGxWWvgSMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA3MDQwMDQ5NDVaFw0yMzEwMDIwMDQ5NDRaMBoxGDAWBgNVBAMT
D2phbWVzdG93bnNmLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AJqdBJ+gXyN/S1y+UP7qwd5BFDSXLct0SR7IQDECf3lGPgHkEv+t+3lBywA6i3Nd
6cQVZ2qqGQ/fUvH9CKkh9/ZJv2PSVsx9UFUiEWNuSggSNUHP5Du7xakCcizD3UYF
IwPZqO4rfAogfqxeX7QU9gyhpTu4euHAhglTXB5F/utNFBFgVo+ytrI8tmsha10M
tM9Ta78h0AYttLi86jJWFfOp+vovZl6pdX0uCrx1UdwbA0VOjOqcRPVHgUW70g27
DxzMwIhfcrqy4OtMW44/D+2DPWmsLUozmK/cLUfSHT/YvpzMBR43DQA715PT196i
BFUPm8to5Owq4QeAUpWXiWECAwEAAaOCAhIwggIOMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUup2frr5svwHJjtWuO5qaCtU9oDUwHwYDVR0jBBgwFoAUFC6zF7dYVsuu
UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v
cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y
Zy8wGgYDVR0RBBMwEYIPamFtZXN0b3duc2Yub3JnMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAejKMVNi3LbYg6jjgUh7phBZw
MhOFTTvSK8E6V6NS61IAAAGJHpdnNQAABAMARzBFAiBoEV0+Z2tv0qaFpOZw96RO
Plvclx4UbzGwrgCBGwQpigIhAL5TTQdhaOn2UPYop6k7MHn495GlBREkrKLnq0/2
q2xjAHcArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGJHpdnaAAA
BAMASDBGAiEA6Cb54M34THKNOksIEph+0IpGubC97QdwS+Wu8rxMfckCIQDBP9gz
mK3CZfBduuj5iGa3Y1q1QpeS9Q/y2QtzcU5nkTANBgkqhkiG9w0BAQsFAAOCAQEA
rXc99/F/BzKeiu2b9f0lORNfwxETBONnhsADA5b1b6XaWmSu3o03nZzrVrIlg/13
EGhvJvy0b/l8HKELe35ISYID48gICnXvlQugMZh3gkWPaHK2ku9tFy9ecCxIuzn0
g0AqPsOeQLkMHETt+8uwknb0YR19TzDCX7dCXik+YWaDFnf5USX0aawSHLy9uukr
J6Y8YUYA8uLdVMG/td3PmMlr7MYa3LvfIGOsiq++sfHH3BEEdGEGS2BER2piWV1l
19htmR6kuQZP/vl85BnsWx9YJ6jI7HMPwfX1HhIaxLH7ZRemyGUK7I9FJw7yND2f
JNfTCZ9tkTM7tzmSHMgVwQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp0En6BfI39LXL5Q/urB
3kEUNJcty3RJHshAMQJ/eUY+AeQS/637eUHLADqLc13pxBVnaqoZD99S8f0IqSH3
9km/Y9JWzH1QVSIRY25KCBI1Qc/kO7vFqQJyLMPdRgUjA9mo7it8CiB+rF5ftBT2
DKGlO7h64cCGCVNcHkX+600UEWBWj7K2sjy2ayFrXQy0z1NrvyHQBi20uLzqMlYV
86n6+i9mXql1fS4KvHVR3BsDRU6M6pxE9UeBRbvSDbsPHMzAiF9yurLg60xbjj8P
7YM9aawtSjOYr9wtR9IdP9i+nMwFHjcNADvXk9PX3qIEVQ+by2jk7CrhB4BSlZeJ
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361655351418135022438520346604310676305938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 00:49:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 00:49:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jamestownsf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19518127456306730900216563331847385165320502778774257938629039476276736296786884342139060847872070589201937473909657102488419842621105506135317970193636751720826523367252635658477498138622717963183589268502501801474176948708764185211766122266855333810514361519165608413675403378795130600523574390277975633723874678819198374915258555527690592909914604250918437399142052409031106096659401494848455635278818540567447820364224606013104846181397757976839162583743806947059891209617538801386891553715647411544039327839614834497299364505964580735736316027688679076349604031832191464774577099458749851893756037957792243878241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba9d9faebe6cbf01c98ed5ae3b9a9a0ad53da035
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamestownsf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001891e9767350000040300473045022068115d3e676b6fd2a685a4e670f7a44e3e5bdc971e146f31b0ae00811b04298a022100be534d076168e9f650f628a7a93b3079f8f791a5051124aca2e7ab4ff6ab6c63007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001891e9767680000040300483046022100e826f9e0cdf84c728d3a4b0812987ed08a46b9b0bded07704be5aef2bc4c7dc9022100c13fd83398adc265f05dbae8f98866b7635ab5429792f50ff2d90b73714e6791
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ad773df7f17f07329e8aed9bf5fd2539135fc3111304e36786c0030396f56fa5da5a64aede8d379d9ceb56b22583fd7710686f26fcb46ff97c1ca10b7b7e48498203e3c8080a75ef950ba031987782458f6872b692ef6d172f5e702c48bb39f483402a3ec39e40b90c1c44edfbcbb09276f4611d7d4f30c25fb7425e293e6166831677f95125f469ac121cbcbdbae92b27a63c614600f2e2dd54c1bfb5ddcf98c96becc61adcbbdf2063ac8aafbeb1f1c7dc11047461064b6044476a62595d65d7d86d991ea4b9064ffef97ce419ec5b1f5827a8c8ec730fc1f5f51e121ac4b1fb6517a6c8650aec8f45270ef2343d9f24d7d3099f6d91333bb739921cc815c1