www.aaronjensen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:b7:71:d2:f6:9c:8c:d6:6d:ef:12:ea:27:16:55:27:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aaronjensen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:b7:71:d2:f6:9c:8c:d6:6d:ef:12:ea:27:16:55:27:1c
Serial Number (int): 299011757888202219630227367446065762871068
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fe:2d:df:5f:71:0a:eb:af:c0:88:35:78:11:d8:1a:fc:f8:10:76:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:3b:09:30:2a:85:e7:f5:55:fb:eb:46:63:de:0b:f3:6f:6b:c7:6b
Fingerprint (sha256): 3b:52:cc:8c:de:81:e6:17:86:80:90:68:57:31:9b:0f:8f:e3:40:9c:e7:33:ca:c9:0d:e4:21:12:8c:41:80:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aaronjensen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aaronjensen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aaronjensen.com

Other certificates including the domain name aaronjensen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.aaronjensen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu3MDe1kIs++FbH5gvxw4
x9KEYqsFZjoor5cz2o8uW04VIP05MvmZtcTEstdJkGOSYjLxi/bMuzFNo/sIgK5U
rybMIlLuEEduQTJluGjOxWj0TcCMNrdlxrqjBK5M+l6/Jmlw3XO8C+9grTHReMIq
ULqhTIchs3oftxqDjQ7h/jHX/LJW+Q2nP3IeAib45gFwiYzeS4QLlBzTmJRSWK+C
fW0S+phetJliYlXeCdAcmMnFjaGJekGkOi1qvgs0oV+vpI7zOBkR3OPENLk+KMwB
7sgRU1CtqOfOBfgpH+/rGAotLta0g9xrAgsREmnJqU8X59HMNF66ogwB1AZ0/0X9
MNuTRaSYjwkZ+MHXhWaDGxojp7HVjG9o3RxrtMalrVeIUQaMEJtjgtmCEy5cKEQ6
Cv3HivuQzJv+kJhHRskRdix68hodhf2j91JceuJuwmsu6dZy2lUDjWv6pM0N6Hse
O0xaH6h95y3gr8uojSBnxUdahG09FMZEco32N1E0gB9UbfdHOjQ9nWZtI971vH4E
mpo2tfBYLIQnyQ8u6Xj2eFEDOO/IqKdXfHgedeFTVSNlsbqDOTrPbR9u/LrbVfVb
Gslgvb8Hs2oTqpH18N//qcZ3PufxUUZNE3JPTE08RVp5+wB8Z/R+drvhDB9j6IH+
DuHVahk0+5Z5gz4+/C1yYVkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299011757888202219630227367446065762871068
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 05:50:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 05:50:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aaronjensen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764726310073685357108577498228208748745070540911801331750838045812416809962956778900551617548567400479285043624791444201336952184548358372427581263753310259599045757710276842846368696075030054400918558881666737549827529600303035653241270126228751686788948965224797346115100720852904800739157346375741388781012939695085088471204657606160283302979759399427333140882009691726547625097743503888338543095170102356279418475171437729716833003559750482570714024259650028807301062021000899567271444600289017486166908459079049579045987611268843768646334171817187084666313619067635718389031291468914072216057229346190834152203854998138187149744841684996458351146081163361699855058120641256419231013090673264891984541364190971149656995042747810928224442593277947273240382168474277050435965525021841375955651492891622499476772698274741681103089352723547729870145870114691011719632244763105563912947253488075422496560096223327688915437463699509415953100389810540450149180315647574223795331336786610142698072658526732598552019000362386450759338833808475846941905325546766188100713626328851069692353372793714234518839388894044419445629575890101530277975037828501437924428488205607563205645811106690018760924061473764506629313484797904343334965633369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fe2ddf5f710aebafc088357811d81afcf81076d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aaronjensen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016932de8d150000040300473045022100e1d34d2b6da307bbc6ad10d9003fbfb38b71863685b820492cad7f8f94750bd602202665bb75a1f9a3fdfbeda97984de8caa8f5146b361f43ce1d70e73b69ee80d69007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016932de8d66000004030047304502201d376a53bab7386abdb818e515dd6adbba7ee30b0cf591585dd7e12d12828a74022100be145bd886698410de8c6e4a2b19e6bc3b9dbefbf0981c7116510d0e87c329ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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