www2.jcu.edu.sg

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:42:e9:cb:a1:50:44:ae:0a:06:b2:37:2e:8a:15:c8:47 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.jcu.edu.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:42:e9:cb:a1:50:44:ae:0a:06:b2:37:2e:8a:15:c8:47
Serial Number (int): 328461427061705185840309408826252454119495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0c:df:8d:e8:88:af:32:34:a6:06:91:e3:1a:79:3e:81:6e:90:37:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:d4:09:44:be:ea:54:b3:6d:c8:8a:90:b9:b0:65:9a:87:21:92:c2
Fingerprint (sha256): 39:1a:98:8b:e8:97:72:33:02:55:29:ed:22:9a:6b:64:9e:4a:1f:ab:de:aa:3a:29:c7:67:7b:53:d1:49:32:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.jcu.edu.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.jcu.edu.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.jcu.edu.sg

Other certificates including the domain name jcu.edu.sg

(limited to 100 certificates)
secure.jcu.edu.sg
studygrant.jcu.edu.sg
webmail.jcu.edu.sg
afm.jcu.edu.sg
afm.jcu.edu.sg
grc.jcu.edu.sg
aquaculture.jcu.edu.sg
studygrant.jcu.edu.sg
tourism.jcu.edu.sg
earlychildhood.jcu.edu.sg
abc.jcu.edu.sg
openhouse.jcu.edu.sg
grc.jcu.edu.sg
*.jcu.edu.sg
grc.jcu.edu.sg
grc-dev.jcu.edu.sg
grc-dev.jcu.edu.sg
secure.jcu.edu.sg
portal.jcu.edu.sg
secure.jcu.edu.sg
twmtest.jcu.edu.sg
afm.jcu.edu.sg
edockets.jcu.edu.sg
grc.jcu.edu.sg
evserver1.jcu.edu.sg
careers.jcu.edu.sg
enquiry.jcu.edu.sg
psychology.jcu.edu.sg
www.jcu.edu.au
environmentalscience.jcu.edu.sg
www2.jcu.edu.sg
www.jcu.edu.sg
afm.jcu.edu.sg
secure.jcu.edu.sg
grc.jcu.edu.sg
secure.jcu.edu.sg
secure.jcu.edu.sg
secure.jcu.edu.sg
grc-dev.jcu.edu.sg
afm.jcu.edu.sg
grc.jcu.edu.sg
grc.jcu.edu.sg
afm.jcu.edu.sg
psychology.jcu.edu.sg
psychology.jcu.edu.sg
webservices.jcu.edu.sg
enquiry.jcu.edu.sg
secure.jcu.edu.sg
earlychildhood.jcu.edu.sg
www.jcu.edu.au
*.jcu.edu.sg
WEBMAIL.JCU.EDU.SG
afm.jcu.edu.sg
openhouse.jcu.edu.sg
secure.jcu.edu.sg
grc-dev.jcu.edu.sg
webservices.jcu.edu.sg
counselling.jcu.edu.sg
afm.jcu.edu.sg
grc.jcu.edu.sg
secure.jcu.edu.sg
parentsforum.jcu.edu.sg
studentweb.jcu.edu.sg
afm.jcu.edu.sg
webservices.jcu.edu.sg
www.jcu.edu.au
aquaculture.jcu.edu.sg
grc-dev.jcu.edu.sg
grc-dev.jcu.edu.sg
psychology.jcu.edu.sg
abc.jcu.edu.sg
secure.jcu.edu.sg
grc.jcu.edu.sg
secure.jcu.edu.sg
www2.jcu.edu.sg
www.jcu.edu.au
edockets.jcu.edu.sg
www.jcu.edu.au
grc.jcu.edu.sg
clinicalpsychology.jcu.edu.sg
careers.jcu.edu.sg
twmtest.jcu.edu.sg
clinicalpsychology.jcu.edu.sg
tourism.jcu.edu.sg
secure.jcu.edu.sg
grc.jcu.edu.sg
afm.jcu.edu.sg
www2.jcu.edu.sg
web.jcu.edu.sg
afm.jcu.edu.sg
twmtest.jcu.edu.sg
environmentalscience.jcu.edu.sg
webservices.jcu.edu.sg
*.jcu.edu.sg
webservices.jcu.edu.sg
grc-dev.jcu.edu.sg
jcu.edu.sg
virtualopenhouse.jcu.edu.sg
edockets.jcu.edu.sg
afm.jcu.edu.sg

Certificate

The complete raw certificate details for www2.jcu.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAucvd2KIyXhl3gukKjqbk
TnpojDyZfiuj8iuDgtXCQ5opK0ZkYEQZIWU5fzPIZHGVH3qFOT48qrLQPrkiomVe
2szTL/+VCIYUMReU/na/omLH+ok6bbYK5ZVMJuEnmlFoyxIewfijMIscmJ2opWMw
3iuLd4hrJjBPOhxAxvWcNzJCaONotOWsSGrShyV4upgmN9Ve8At6Zyd7ACOxMuQt
KtUPu+vDN54x0+78um4dO91B6wOz0YRSIbBt+yEZoWI7mViePa7EBelVslOX1pLw
N9KT9fXXlZG9a1SVzuBUnFa6q/Vwpjk61Ci0MI1UR+i0m0+oKJQTy7E5BLPvF2sS
7A4qdgQsR5nIDfQLGjtqlIkV3ccMM7cHVNrolMVpa7yBWXTlr847zBqaK6VMavUM
iqUgs+g5zu8dqwZaVPfdq3tgcU2PCpaO77VyFM7Pn7ooXQBhQxsjL8y8zaF2gD66
rzO7DzG8GPpuFNEpRHfcPdN5gw1doGxIO60t4lcwnMiPCGyqqhZ+iurW7rU2gM1s
UC0ovPIGYVIHHjTb+aDEc3iZbzh8tlyYfXKxT+DQ+Icg/YCglTmyVyvJRdxtq0MZ
KlNzFLVPjsky4HHpCTaL9t/1rSWv1d9AT4WH+kX+tWRphhiAM3/tf2yXYCW4U2hj
L99Dhaxpjo3pCoA1Accs4LkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328461427061705185840309408826252454119495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 07:24:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 07:24:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.jcu.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757982992863301156105307137920799213517801790625798680071983557461621506671056762651382637777255305007036849240276565244715320617756623919703422584229882457763164642781257913333849672451043960805343199495993827155405394593488632440327473678265770117368585552778363721123994270958217485683203494248190652675830781480069922156160582437562646752233971030551941821957922406178679041257947823045170595227386577566299602179740017507247149283818639637244543631102527456835098367772569159777565885240475450848031121414643925565212738056068187521152126955669487583601742041400477432151628560427505707888014321731769304853864016567830666882368018342813980661772438201458670312164571338326208109661414253839349322372415373105944696591002847277816390187947375660919611511463202638010820275768287472653165555534294644176050602485881979705880517944967422162075315628794525075824578201883732206073155073859287584587984427693557202893652996068736017092084555662732264340636643959320531508503686386413991835926044544387448197672582915681971715127744112385206839177190022428215585928604556254052056765051616496848672787488048984155957786743842899867129769640882159636721307893227907761203727709932833608016767274854390945485434125620720367831813513401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cdf8de888af3234a60691e31a793e816e903728
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.jcu.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016898b5524f0000040300483046022100c00e0df5d587b736de720d9fe7a4e162db12c6fe995dd96289808dc426e4b54e022100f663c54b9c0f002b0cc34b599b0f7230f743b46290783b223fb80d3d61a08e3b00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016898b552c1000004030046304402201298a67a47441712032a40b16d37b2c6da568fe576c437c57d6497a871e0ac7e022062bd35a1e375d7d8c68512e107253ce5c352ecafd64308f17777a8cdb91f9e80
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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