www.janissa.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ba:6b:56:bb:02:6a:19:54:83:5f:df:0f:61:43:c4:b6:72 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.janissa.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ba:6b:56:bb:02:6a:19:54:83:5f:df:0f:61:43:c4:b6:72Serial Number (int): 324772055768656002378815803656348438410866
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 91:8f:d3:1a:3c:ce:89:6f:69:86:c9:18:61:06:79:43:1b:db:3a:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 2d:7d:5f:00:04:3f:b0:7e:50:3e:d6:67:9b:c4:65:60:68:22:44:19
Fingerprint (sha256): 3a:c2:fe:c2:48:cc:c7:12:6f:89:55:f8:32:52:61:25:26:f5:d0:cd:1c:71:37:53:47:ae:9a:92:b9:f4:b0:8d
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.janissa.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.janissa.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.janissa.org
Other certificates including the domain name janissa.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.janissa.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISA7prVrsCahlUg1/fD2FDxLZyMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDgxOTQyMTRaFw0y MDAyMDYxOTQyMTRaMBoxGDAWBgNVBAMTD3d3dy5qYW5pc3NhLm9yZzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALuPncypS3PiCssvTSnRlpVC411HzuZb 8qVuAbB48PsJn7m7+3t2Ww2NgGyeet3hFWVaYrU7nDxd7a73PKgkketKkl2T6RiW KSXIhtTG76yVekPfQmLteltYTMpci3UIyyRsG9TJrMKcD+bR8yFBpqI08HH5evg0 UgCH0SOJpqiCJf0NDlxQlh67X8dsyYfusZ9BIbokLkDy6zBz1x7nGhxTBBpnHSLs WLXwBIUR4UV4G0k/YkHwL1hUiWZI2GLrwEqc7GDxFpaJ5ymvapUGNd8lxCmTaD6o ogSQId+jqAfVQovKMwYXJAS+PJFBYUNa/4H2cooMbrHkMYH6R16zsVpY4y5Jwb1C w9miIZMLGlJnq8SBsfVAahNRnqd+1+HLLfyrFYJeSuzTaGR230WbWoT+32l7eB6e hCJ7MuboyYBVbF3p8KS5L/ii3DnXNuXKbcu1J44rT/ybcFxnGAS6K5Pn94cjB9c7 45li9MfKPguwumkww93zGC3e3bJTRz0KzZKq4ac4fNV5eAADYHgOHhlKJ/yyguE/ 7Y/IKZEj33XOhVMO4h4Ska/PK2F4Y8WQj+KheAYU3mZwnqNjdDYUdbf69lhzhV2K fFuxXsmlNDUA+xRRTgR7J48b16RVKNeKn8kseNNNujTREU1YDwsh5OelYvtcIfh6 qKg5EYHtP4zDAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJGP 0xo8zolvaYbJGGEGeUMb2zoBMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3Lmphbmlzc2Eub3Jn MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFuTMDN ZgAABAMARjBEAiAsUtzrLiY+rteQPdSN26X7Z2GS8yakhrRme59WzhBa4AIgM4VR z6ocpW8DWBecqgFL6fwS2nLB25wps36G8macyhQAdwAHt1wb5X1o//Gwxh0jFce6 5ld8V5S3au68YToaadOiHAAAAW5MwM2MAAAEAwBIMEYCIQDVHc5ek0+ULdxOzY78 uxxHGxPRuQAo4GPJHYMIxTFudwIhAMptmltqDfTFHe8telCO2GSEE5cr50g7GoT1 q1GuJWlqMA0GCSqGSIb3DQEBCwUAA4IBAQAuCzWeAgAQ6ezuaTotGygIFYx9ofG1 9CIAscIfou5+uCuF7A8N6muYqkv6pmoMzWUbvp0g3PJocNPzfyBki7WHiXn0nmKr inppkpDnd2st6lkIg/8YcdBwAkVcSVSnD46yq6ARqJ6ZSpuU1yWVe43ZDyD6eHeB 3v+AlkH5/E2L5KRGxcNdPXBQkhusyug1yLdNzhgWvlClNk6S6qss4EkQ2vH/6eBn DzRCcBpE/eyoxHALi07OVuWqB+06cox8X0EghDzqPjHsnDwd4b9Zz6qeQSXn8vgO r7L1ItIy7JU17cH3eS3T5Nr3iiUnrjLzgTH6QmLPgCMCnZRiZIR5JOa3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu4+dzKlLc+IKyy9NKdGW lULjXUfO5lvypW4BsHjw+wmfubv7e3ZbDY2AbJ563eEVZVpitTucPF3trvc8qCSR 60qSXZPpGJYpJciG1MbvrJV6Q99CYu16W1hMylyLdQjLJGwb1MmswpwP5tHzIUGm ojTwcfl6+DRSAIfRI4mmqIIl/Q0OXFCWHrtfx2zJh+6xn0EhuiQuQPLrMHPXHuca HFMEGmcdIuxYtfAEhRHhRXgbST9iQfAvWFSJZkjYYuvASpzsYPEWlonnKa9qlQY1 3yXEKZNoPqiiBJAh36OoB9VCi8ozBhckBL48kUFhQ1r/gfZyigxuseQxgfpHXrOx WljjLknBvULD2aIhkwsaUmerxIGx9UBqE1Gep37X4cst/KsVgl5K7NNoZHbfRZta hP7faXt4Hp6EInsy5ujJgFVsXenwpLkv+KLcOdc25cpty7UnjitP/JtwXGcYBLor k+f3hyMH1zvjmWL0x8o+C7C6aTDD3fMYLd7dslNHPQrNkqrhpzh81Xl4AANgeA4e GUon/LKC4T/tj8gpkSPfdc6FUw7iHhKRr88rYXhjxZCP4qF4BhTeZnCeo2N0NhR1 t/r2WHOFXYp8W7FeyaU0NQD7FFFOBHsnjxvXpFUo14qfySx40026NNERTVgPCyHk 56Vi+1wh+HqoqDkRge0/jMMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324772055768656002378815803656348438410866 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 19:42:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 19:42:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.janissa.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765182127482242330257475404876823383359864899064061093474621954437647208234054353419877960143551507633153000713104490754969905707593938866110998352930295149419781930940050690388944701529034684185532790172310236724360531248390871913567179103531430206664146085399915482013067140696908065083002569370910612335962828988944071728595973741900240090301178545531724170352891744437667700330877504104693847739627840159806404604175467299588828270596191429234521372167502033614356249299910168544212682128123646731486384644213383940146931592802917048136889203999840913712590644652308051270697891250283160531468646002316197483973710740463220812808078668217065539764729614152144187399067923476295613227933764434611873539139725778459791735616099630309480676194842884043804689900570242454601296650937943886992623930202101657249002336391566086990470615224516544051475308855771775274641308402079638064702802915027237058643587473359625260801244776963513408084909717841971825695419457963120456469959101668238138540235867224075749331396636039363989441699707758800433903372895163445504878015882762310600148855876840617844008630260679422683528792927570757512153474737109753502344109575304769938158231778342721741999120416134018280002727788597874196303809731 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 918fd31a3cce896f6986c918610679431bdb3a01 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.janissa.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e4cc0cd66000004030046304402202c52dceb2e263eaed7903dd48ddba5fb676192f326a486b4667b9f56ce105ae00220338551cfaa1ca56f0358179caa014be9fc12da72c1db9c29b37e86f2669cca1400770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e4cc0cd8c0000040300483046022100d51dce5e934f942ddc4ecd8efcbb1c471b13d1b90028e063c91d8308c5316e77022100ca6d9a5b6a0df4c51def2d7a508ed8648413972be7483b1a84f5ab51ae25696a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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