jamesschuman.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:2a:fc:02:c2:06:45:19:1f:47:a0:2f:5e:b9:f6:a4:23 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jamesschuman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:2a:fc:02:c2:06:45:19:1f:47:a0:2f:5e:b9:f6:a4:23
Serial Number (int): 271602464893477234266644562448308189439011
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:8a:86:c5:f7:89:52:d1:03:06:84:10:58:c7:9d:e4:44:24:64:1f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:06:1a:e2:46:21:a9:56:08:ef:2c:8f:93:f8:e6:47:3c:6e:80:8b
Fingerprint (sha256): 3c:6e:5e:7a:bb:89:ad:ba:9f:78:96:17:2a:e5:67:5c:09:15:9c:8c:ae:28:7d:12:52:22:63:9c:9b:89:d1:d6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jamesschuman.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jamesschuman.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jamesschuman.com

Other certificates including the domain name jamesschuman.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for jamesschuman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4nNazyJ7yGLLnlueM/d1
yDGAAYQiy3BePNCOMzrBncmchrIOy/wrNYa3BS0etxqArwG+/aFPbUXuEnVPwYwX
MC+oZz4Zum2E6pMueNGLcjWXqbDVcry91b346ZVEIqqx5XxdNYQyEYT8yMAkQgFE
LwUMukvlN1jUgL1Lc5f9rF3zQtrsGW2uoEFk63Bka3NO7+URte05nEy/j92Hy1Ac
XON9vxDUo7QzI4QmJwb9dED2mutNe2wZxTeNchKGqD10MlCO2hS7oOvFvo6ddpVS
33J0M47t6tEegfeta0mHGg5dY5onacd+3QYy01UuArPxYaUVKN/gOlOxlISGGY3A
yz0BU3dPxpQtXeXZ8fwFXa4DhDTj6ucIsXjJgSFdCd8w4+bUV9gz9BMhGbzhJw/x
ZXjIZb5Sal4WPxQrJITn51eLb5WzxFQUqhNe3PL854Gy+gQjU17QXysjWBoHTlBI
qpm+g33HbOIZaAlztJVaLNapJUDNEbNJF9dLc6RbupMyrgppgjp8DFgNzwbkqMCr
y4+FX1KSPbPrEDKSTzLMCjuKwJU+Kllaw/KRx0x6FrtFeK29+Hq2cCRN3MhDViTD
Q7UN5yFQmletW9k5Qj58tSISkJB8/DNtyYJFDaqQ8ceaG/SYaGjMDiruYtUw5jP0
OBnX5w6BNATCHBG0A+dEQiUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271602464893477234266644562448308189439011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 08:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 08:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jamesschuman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923837864887837153464179989638696285405635960450215749252050242822325415884290763236178672654601855681006655031052730419551188889198710370739926996577267836615794124261346294216120711120187840128351869436824089195379488329670275902477110039376956468926311007092592424198305474179810157947114479638648054272268829969459827675894314579130106609835771776891702334297585041722334884481439744717193136253112474657243720146008043571910186145025733741453284426927459312876695541709704505327020655407654712877392360235486364153026931780518466166142973340786149266416901779219487650180690880294490160502661337102267168181422582161942295940891501489672409607338211230740131379387781838902070735456049825518035833240748901966271107988574912036079270695001678191161868947538176099778315311393646480924701583638436903055385570854211974398299580953880980307621598313184977392922944410696896685087891759107530805321738198173411115187545971098567505048915809883914020744458886035016014765360481455176496337083657850242005617388942241934549421951156176060629279948920664667389286209225897986781172149458249141691938559324382473350537662577531589649396884021439030854032988119622155430103832293759043988377300086754573535137062071470582226706996937253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e8a86c5f78952d10306841058c79de44424641f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesschuman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017071626d60000004030046304402206f5637260fc4479c9a275b5c52ca9533b774699f3e274e4aa5a5227d0c143d9202207fdd0bae745e98ba4a920f198c7611888a659696e0248ff2431e65ebd9d07f540075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017071626d8b0000040300463044022004ca2d8c6596c94352e09b625803c487c439b43ea0ac255a398bf231ce8dc4cc022068aed8a795b774190efbe1308bf629ce1fbc5ee5bd9091f7f29f41e46414ab75
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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