press.sjms.nu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:97:df:44:e5:54:89:3b:ae:e1:65:fd:4b:b2:0d:c9:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=press.sjms.nu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:97:df:44:e5:54:89:3b:ae:e1:65:fd:4b:b2:0d:c9:a0
Serial Number (int): 342185651462479396253649117587282531830176
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bc:59:80:43:63:5c:28:62:78:ac:6d:c3:74:bf:4a:4d:e2:35:ca:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:43:77:18:1c:b3:06:e2:e4:94:05:36:c5:f0:21:da:f6:97:ac:a2
Fingerprint (sha256): 2c:39:ce:02:9a:03:e0:b9:94:96:77:1b:f1:e5:33:07:e0:35:bc:0e:40:bc:32:53:08:4e:fc:44:cf:5a:b3:2e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate press.sjms.nu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for press.sjms.nu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

press.sjms.nu

Other certificates including the domain name sjms.nu

(limited to 100 certificates)

Certificate

The complete raw certificate details for press.sjms.nu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342185651462479396253649117587282531830176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 13:57:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 13:57:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'press.sjms.nu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 919996489919032047535056761937587267195472546911109208318725897210590918797895617583696623410191897970213091687712028010769913712046019709864760186264035252108379812156297180722497854188264015963664197325803225599985584523983013788389944111174841631728241532103804053419577911686571118686755285566113459681883739228303552270823704681482914544007983722531721930938206838679085952802307166709238031122234443084149212822584260038680307237639147530309376529366429991585706637760731656705570390501735148292837252172484820879654578718823198381603919763858979656218190358110217671698344189178602904392502265308278821193424039753958922262874548126473467135757873830850475068945242468804137951101778705246394314448780783183020873424876009362324922512058608855833572482210884821946463522078235552047874755961793281025890895830889713916013852600554344754578630306137981721867270012778859210001889095578792044951512327589065231693718983260583319277867988129574659466114013311164663502572953651174076471688813392606817091380795884549891590748550628779021481447361766055285635013491316081027649157295621341930840710227181145064596446213751728143948467505221507289527651270776238176961428262527909237782991891596404732179220750209465897810325820911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bc598043635c286278ac6dc374bf4a4de235ca11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'press.sjms.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a0e6b7d20000040300483046022100d0f37f09b58530c34e71dd34063811abd0e52820942f63e4f2a8e0ce04d0de86022100dca216146b2efc43ca30389a83e26d30d35d94ca0ad43ceeb13b8d6456fc4055007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a0e6b7c6000004030047304502206b3e9e3753408a0e1bd83a8708a5b7cd45ca236610306b2f7c2588da379f8683022100f4c79a198a856e216f8747f3382c4009e46805a2ef61f816a3e8167c6f8ee1bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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