stjin.host

Issued by R3

About this certificate

This digital certificate with serial number 04:5e:99:4a:73:7e:d1:15:be:ad:24:ec:b1:dc:39:9d:ec:84 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stjin.host

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5e:99:4a:73:7e:d1:15:be:ad:24:ec:b1:dc:39:9d:ec:84
Serial Number (int): 380639444673456387409529462329988328844420
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: cf:fd:ad:ed:fd:7f:ab:cd:fd:65:52:b6:35:86:50:82:c3:66:ea:66
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 94:1c:f5:df:0f:b2:db:29:15:cc:69:2f:81:3c:a8:f6:82:03:43:8f
Fingerprint (sha256): 21:b4:02:f7:2f:9a:78:d0:83:a8:85:1c:b5:a5:70:39:64:f7:4d:ce:88:d4:18:73:86:33:2b:b6:22:34:9b:2a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stjin.host

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stjin.host

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stjin.host
stjin.host

Other certificates including the domain name stjin.host

(limited to 100 certificates)
stjin.host
timesheet.stjin.host
helpdesk.stjin.host
stjin.host
cometin.stjin.host
cometin.stjin.host
stjin.host
stjin.host
helpdesk.stjin.host
stjin.host
stjin.host
stjin.host
stjin.host
stjin.host
stjin.host
timesheet.stjin.host
timesheet.stjin.host
stjin.host
stjin.host
stjin.host
timesheet.stjin.host
stjin.host
timesheet.stjin.host
cometin.stjin.host
stjin.host
cometin.stjin.host
stjin.host
stjin.host
cometin.stjin.host
stjin.host
timesheet.stjin.host

Certificate

The complete raw certificate details for stjin.host in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISBF6ZSnN+0RW+rSTssdw5neyEMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEyMTAxNjMxNDFaFw0yNDAzMDkxNjMxNDBaMBUxEzARBgNVBAMT
CnN0amluLmhvc3QwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCvHuxt
zsZBz5ZbtPJWnBSbMp6bOaL/za21SDvtIQMCArwIarkI3LgsuN+IKbVK4iCDzH9O
fmUsmt6x54tl5v6whMNfhY0eJgbrZNZjD/gn/slZhrGZeMuXfyA2zbuiRYz2n3tH
BZJ+4EH6GlkSbePJJtGeKlIi+BQiJloTR5lFyHsbF66GzdbwjGZfssATqblZGAmb
njx+aGF+ZN7CS9thDCxWuXdop9aFGNKZ6Ql3y6qfljo6uaXw4iofbbkAWeg2flRO
40ik8rOptLmFaf1zv/7lArgJfQOBd3qit4d/+cfBw3Pc4icN2uNfGCwigd4SkUfa
gtg5NezX2yw4tUGgkEoORF8zbvEQYBHfjfA6IqmVXYPmiQg4pXhOodMGgWql4NfJ
mEjaKhpbt0tRtmZUd3fI83knEWvs7vXnPsuoEv9Q0Pla38iNXcvJ4DUxDKr+iPvQ
xkMgh2CeqxCfWdtB5IAgQ/oCDBwMeWspiHXPWFMSk/84QGOJI6Ll+UGZjxS5AWkg
coMBKD6NvgH71P+eGX75De0FztIbiatCEkZ/ksaJPRftc7ZNwoI4mq+R6CO+K6Ot
l8HDfq6ElO9nIyaMWKXPY9ObWAkcBj0+K4EvpDDSWRWjx4xXmTmIilJ4I/sbqw5m
1fk4HRv6IG6eni2ZcARVT5PbA69CsjaptEokIwIDAQABo4ICGjCCAhYwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTP/a3t/X+rzf1lUrY1hlCCw2bqZjAfBgNVHSMEGDAW
gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH
MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz
LmkubGVuY3Iub3JnLzAjBgNVHREEHDAaggwqLnN0amluLmhvc3SCCnN0amluLmhv
c3QwEwYDVR0gBAwwCjAIBgZngQwBAgEwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAA
dgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3iviabfUX2AAAAYxUyOhcAAAEAwBH
MEUCIQCnrCX5rfHqDYRgjR5cYB9gV8l8nNaz/nzadZz5AYVKEwIgOqQXlXH7S5ws
R5RDVx5QrKtOun3KCQoxwCQeyJroOMoAdgDuzdBk1dsazsVct520zROiModGfLzs
3sNRSFlGcR+1mwAAAYxUyOi+AAAEAwBHMEUCIQC+hrmUfV8Lze/I7WHPinvNVsfk
D5V0dSPMLxuM3OzsYAIgCROeEgC7rgHYXlIQXln3kbMxA5c2SpClqoiimHQD+uww
DQYJKoZIhvcNAQELBQADggEBAH1SEFEbxCg0CmzaJcFkyAsTvkVpelZpLBCPEUPO
nwDctSfOBgg7xUEAHDBPi7Q52C8szuzGF3IlJ5QeyDtAA1Vu6wtaMD2jL/KLbzpn
506ru/T4r1ixrz5iiv5z+p+UOiPhm4eel2kkMpJBadS3bBwhXHETjEeBolwOYcqk
BPvsXVT7+5Rx2kAgiqsIB4sgtQPsmk+nFzhXMuEvmBchJPGaQOHbOQN7lH8udPKd
0piv6qc2L5+0l3x7OU7382LsGUpFl8J0+6s0PeGsLyYd14G9Ft5EyxanYJtB1/XY
rG1E7JYFPPhuSa2UZmoT7ciLzhhszvgVBXgasO6bLM8ryTY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380639444673456387409529462329988328844420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-10 16:31:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-09 16:31:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stjin.host'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714430512995291565175137255791058471373697371654980902684633666223911122573232026308734107565012611759817541184321236060137332161741219408558329409960909665153126690891419273247148351921473272987642103484100909228638976855664392119481348066132114802749610892023497207126158095886148467569011291454194838666804109381995034122324772711457955727685075119213399948181156883199746098834628622394458817933794662077916257892853628642720062748038438620791483883555045899325465970946519632353792795099737830825923611515613012011657493797925749652475123376794905124735919128034113369796381145684735176421959139943433987362871828756718047837068509783890837441600238899501725566217513640773284715607018729825356304608032318850710768548915380593339494009697964240191574314455712500634301893054954907625856424305674501003505176794069330432810045315886573099244640791046104861706313474372027052715226501943005078231998477929174001520737737019560250953803903174073209778859824907359045053528966694380322988028893009805798588514685200595761518954437758416604912307326117901466974321476742840558212505257555189186934370359670287031325378057382951093167834532472111706907724551723236738447184999407508233067543641694167420669046477347292406191552603171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cffdadedfd7fabcdfd6552b635865082c366ea66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stjin.host'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjin.host'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c54c8e85c0000040300473045022100a7ac25f9adf1ea0d84608d1e5c601f6057c97c9cd6b3fe7cda759cf901854a1302203aa4179571fb4b9c2c479443571e50acab4eba7dca090a31c0241ec89ae838ca007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c54c8e8be0000040300473045022100be86b9947d5f0bcdefc8ed61cf8a7bcd56c7e40f95747523cc2f1b8cdcecec60022009139e1200bbae01d85e52105e59f791b3310397364a90a5aa88a2987403faec
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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