jer.ubiquitypress.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:f5:a4:2b:d3:6c:4d:f9:4c:42:65:60:f9:f5:a0:e7:14 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jer.ubiquitypress.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:f5:a4:2b:d3:6c:4d:f9:4c:42:65:60:f9:f5:a0:e7:14
Serial Number (int): 306240361146470056647322693989114025404180
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:a9:38:90:a5:ce:81:5d:f9:1f:72:33:bb:e9:3e:e1:08:ea:d7:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:27:47:b1:fb:12:eb:1c:a6:97:19:dd:58:f1:30:df:f7:9d:16:f4
Fingerprint (sha256): 27:d1:fc:c2:2b:47:16:a2:da:8c:a9:97:4b:69:58:e9:11:f0:d6:f6:9c:75:b8:07:39:c2:a3:b1:6c:f5:52:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jer.ubiquitypress.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jer.ubiquitypress.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jer.openlibhums.org
jer.ubiquitypress.com

Other certificates including the domain name ubiquitypress.com

(limited to 100 certificates)
working-papers.research.uoc.edu
cie.ubiquitypress.com
pjsl.ubiquitypress.com
jrcs.ubiquitypress.com
sjms.ubiquitypress.com
journalofmore.org
aa.ubiquitypress.com
fou.ubiquitypress.com
ijosts.ubiquitypress.com
www.psychologicabelgica.com
journal-labphon.org
luminos.ubiquitypress.com
www.sjwop.com
besl.sljol.info
anthurium.miami.edu
www.worldwidewastejournal.com
www.psychologicabelgica.com
www.culturalscience.org
ijc.ubiquitypress.com
jeps.ubiquitypress.com
besl.sljol.info
ijic.ubiquitypress.com
conference.codata.org
nsbmjm.sljol.info
jumr.ubiquitypress.com
www.sjms.nu
aa.ubiquitypress.com
www.sjms.nu
history-culture-modernity.org
gaj.ubiquitypress.com
joshhm.sljol.info
ubiquitypress.com
cg.ubiquitypress.com
www.utrechtlawreview.org
prodtest.ubiquitypress.com
jpl.ubiquitypress.com
dze.ubiquitypress.com
www.ubiquitypress.com
medenv.ubiquitypress.com
sljfa.sljol.info
www.comicsgrid.com
demo.ubiquitypress.com
coll.ubiquitypress.com
ajar.ubiquitypress.com
www.ssas-yearbook.com
entsportslawjournal.com
gaj.ubiquitypress.com
os.ubiquitypress.com
nsbmjm.sljol.info
healthpsychologybulletin.com
journal-labphon.org
wwwj.ubiquitypress.com
ijic.ubiquitypress.com
www.culturalscience.org
www.gewina-studium.nl
egems.ubiquitypress.com
www.ubiquityproceedings.com
www.19.bbk.ac.uk
datascience.codata.org
llpp.ubiquitypress.com
gsa.ubiquitypress.com
ajar.ubiquitypress.com
thecommonsjournal.org
journalofmore.org
www.psychologicabelgica.com
jpl.ubiquitypress.com
slvj.sljol.info
transactions.ismir.net
conference.codata.org
healthpsychologybulletin.com
history-culture-modernity.org
www.designsforlearning.nu
art.ubiquitypress.com
sim.openlibhums.org
ejmcm.ubiquitypress.com
sljm.sljol.info
blog.ubiquitypress.com
uksgs.ubiquitypress.com
junction.ubiquitypress.com
openhealthdata.metajnl.com
sta.ubiquitypress.com
ijosts.ubiquitypress.com
nsbmjm.sljol.info
www.dictatorships-democracies.com
www.worldwidewastejournal.com
thecommonsjournal.org
bst.ubiquitypress.com
rg.ubiquitypress.com
amsp.ubiquitypress.com
cjsbs.sljol.info
vtuhr.ubiquitypress.com
rnef.ubiquitypress.com
paahjournal.com
gaj.ubiquitypress.com
jccc.ubiquitypress.com
srjed.ubiquitypress.com
dscn.ubiquitypress.com
meliora.soton.ac.uk
entsportslawjournal.com
bhumi.ubiquitypress.com

Certificate

The complete raw certificate details for jer.ubiquitypress.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8FTs9ScqYmF5yemirAN
YhoLLqxHn6O5CXm5aXEaeJU1+za02FWHo61/X7xYXmiHsjvRUuSCu+2OMNLLEAml
GTzFSaJgMElLY0tIxK9sEKVUsyQSW5EqStudKG6GLcJuZedCGXINEXL2w6MH92zm
39iaLxMFNbjsLnNUggFqQx6HrY9H0NlM6by2+o4T44aP5bvMUSrBMdKePKXXsPSd
ZhjL/Qcipo0CfZ81Hwmz+poWezwpysqWfxD/m1fzMcipRJQqdYIX4G4zEFJA8QCm
0y8E0oQcVklvX9Z8Gf7iNLsLU2LI3JX+jvd/TIa/p0witO+f0Iy3hUg2Qoo0ZTnY
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306240361146470056647322693989114025404180
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-01 09:23:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 09:23:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jer.ubiquitypress.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23196942887231224411064694911504112608415657799771600145133688426301246973178983263751387272135171423058281991203239097765166468546276232625911048051047169346217652914505666826882064705664786332496524358006197895475828246067561195742212081341049379545994827981911795440903762633057586300837078473891509462433723412694211577014023665450131012335688559952374769217715222483464327270615868498210454041685098089642766532031381266579688444127543826136789606679715782848329030555159234288926764444631926510699749897822177060292646655960409225054293815105046600409397016866368082811290221069396238812993858241931425307285673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ca93890a5ce815df91f7233bbe93ee108ead7cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jer.openlibhums.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jer.ubiquitypress.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016938c7d73b00000403004730450221008dcb6954b9525580ba8fc25ab530f9b60938af546c22f58c1483a73c6bbb921002201a0e8e0959b571d5d45fc4b436dfe41426f460c8126a07b453e45cb3b9f4cd4000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016938c7d78f0000040300483046022100af8f5f802aed34494ae24fcf8a9e662d33631099fe13184fc109691447369342022100b9823383daaff5abe7147a5947e290be5843b92f3d50d850f30250d6522a7e29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002001ea69c144d34b2246cf921a4327082d09eadcb3a15075fbaf4cd8998cffbee27c64768bc554d9c3b7490fc0741cee827de33b0a85178d35154ada29e86fb3cc0c457b548cd355db955b30a9b1cf0b18c770deba11e08ce472949c34f569ac94467bee5bc5ef6e4fc71893ba185a67a45af561c73d7b77b2cb851c68e6568166d399603f86cd8e7ab884e49b31b8a18f0132c60d8a86a1660e4328b30058ccf6ed5ffd4dd79761149020683a58fb18ab06225ea001416f588311eac1e218d14ef038703c518e91bf828d1d0032fc6da571ec276071751e01bf448d34c4499e7488f0f0d3262b2dfa106c3690814d9e82a83aee296e50f3d9038d77382833f7