janiyah.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:75:22:d5:12:55:f7:e1:95:09:96:e5:b3:0c:5d:c1:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=janiyah.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:75:22:d5:12:55:f7:e1:95:09:96:e5:b3:0c:5d:c1:a9
Serial Number (int): 293138818454134000782091184488179411304873
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:a5:f1:c8:d4:a2:40:33:80:62:fb:bd:6b:4a:e4:3a:b0:75:6a:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:d3:e4:62:c1:db:36:1c:cd:e0:6b:fa:31:b8:0c:91:72:90:aa:35
Fingerprint (sha256): 2a:5f:e5:14:87:da:06:d6:4b:fb:f9:a2:ff:9b:49:92:0f:60:7b:2e:6f:b5:b9:aa:49:12:8e:c4:57:95:16:9f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate janiyah.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for janiyah.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

janiyah.org

Other certificates including the domain name janiyah.org

(limited to 100 certificates)
lillianna.org
www.janiyah.org
janiyah.org
www.janiyah.org
www.janiyah.org
janiyah.org
janiyah.org
janiyah.org
www.janiyah.org
janiyah.org
www.janiyah.org
janiyah.org
janiyah.org
fd2.com
janiyah.org
www.janiyah.org

Certificate

The complete raw certificate details for janiyah.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyF2j0KU8mAr/ov+fjpuH
VgnoyBCPSny02fGCNeJ+UQTHu3di72YYDqCucqBsoRbQQTRE4oTZbUomqTnKezIC
qHAEtwYaysR/QE5YvJtCxuY9marATy6qFmRzvGqK9hAPjO98NQzACT7T+QLJPsBX
hvT0cEgECtB9QLRvutPeZkVP5rWCE9jfBehCwcFa0wHkfxARcdHFFTmrY6DdBO2i
x5HdHop1rDi2W/a7lyqqvs11y6pwtIpDd2NfKmDPRTcrh7pzx9B2bvtyK980MA2Y
7psBgyXFFL42vhkDWdJtigztePsO8CrezsCkyGjET0ahsYZvaxRD6NMW44m5fYFJ
y1AMTSLzrzXdH5J4PZ4RrD+ytkAru8QptfPl2xhI6yqHxwq8w47WRvk23XjbrFdp
oDr/4STzYIE5eSNGE06pZ1sadt/hk47T66Lw/MqlzYQ/sPgbjJBT3NC2HEHQGgS0
DSweqVJ4U/fKXjpAOq8GZds9z+HM2zSlXq5sVYcoP6VWFewATlw2veQsehttkeqi
X1+IG5Li0LzPgFFJiNQ3hc3KHRUWC67T8NV05+k2WVxegJdpGYkGDV6H2STM857j
sj3NVsO16ofGO5TU5+7RkC0+xtGQa+fKCxuHo9iu67T5gXyK57ZX7CtB07xf1NIc
IGwv5goxtFwSC7CoJW8USO8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293138818454134000782091184488179411304873
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 10:15:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 10:15:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'janiyah.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817421069355846849124823306487202543499889035012275379950257278725965593618079680197028184039331111718289545298298763808954754504768492929926290984021813550839371622484591188214162043425949213750574602390534428970522517912027251079961019212058863472401165573659723916688853569988662778349113894585452823494259142114439052801415838531321065406524874034715519644342450919018524507518901403143430176549368632334074904072475821861633608416692488164145747301385278375253949555729273525105200173063378736086286111137644066004812226046324884814000475296016226251151947319940022402824450940617408118469167948501869755104020389031654040214253155880557221998477415483496057781837961254142572945924260011520920306000044903531944417882148828151659551347348037729148340483181964799618917033006126547935531665362856413523287376272648746094922832331675206976457520086683580882090512642819088631473887280175543436091769179852944373559034168050013988185941061523496111991062436989373790866011493306417306090791350930139304890436280862929728788413745900301288627942867770036614094886664269760667714206722390638728705063050220015930888447426478395664245422024972823427893385887999873449390240516768756459827068276759560534466925453215258705956458219759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ea5f1c8d4a240338062fbbd6b4ae43ab0756ab3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janiyah.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e0cedb0cd0000040300483046022100d58df61d37ddadc3e62053267456646f5dbcc121ac36005a28fe43d752178d920221008cf1828a5ea9ad0a34c9f67af595ee3cdb70f3972e51638f9a37b77f0ee03e1e007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e0cedb0c8000004030046304402204a06922c8d19a27dac64a868ecf4e49c77ec17edd3d8dc9dcaa09c9623c1457202201f6a919172c70339df63f52dce112d470813be0201bf5f5a2a8e7dc6cf38f069
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006525eecded42bf225e76950e65d4f557b09133d00396f2ad4b688264ac32c208668f4a213314375f7aee44335204cf87105a9e5eb4d4fba2230138586188c67f27c3b50fe05c1d885920ca98d5df77e2bb3373218702143f574ef9c76fde56dd31bc9c17769c470b27e2cd11958ee7969bb24b0e66b66db46362d0b3289d27decc386e9eedcf074414aefecd55be46101d1e4b63beb1cde5532c47674d8aa31d05a2a0393e031e1b6a501469d4020b59e50469158a1d1a8d9251c7aef2e72f394bc5344ae22a4582d4a90528882c2b55b0a9f99b2948f70ceb9fe48a4db31849188adfa8792d2f4e7d3d6c9d0f7435485761798a58fa205fba97ba95f40e7f54