www.jennifergibbs.com

Issued by R3

About this certificate

This digital certificate with serial number 04:11:21:fc:f2:12:a4:b7:41:ca:9d:4c:c5:80:ce:5f:01:59 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.jennifergibbs.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:11:21:fc:f2:12:a4:b7:41:ca:9d:4c:c5:80:ce:5f:01:59
Serial Number (int): 354279121857186401560429270735798822437209
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:a9:ab:09:d4:4b:3b:0f:09:7f:6a:fc:52:34:7a:40:ab:9f:13:f3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c3:db:00:64:f1:6d:aa:c1:91:79:d3:3e:5e:ea:eb:aa:9d:cc:fd:c7
Fingerprint (sha256): 3c:fd:a3:c9:6d:af:f7:b6:c3:98:2b:c4:ea:97:39:67:01:36:36:c4:c8:6e:ac:03:52:5c:c9:07:9c:a6:0e:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.jennifergibbs.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jennifergibbs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jennifergibbs.com

Other certificates including the domain name jennifergibbs.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jennifergibbs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgISBBEh/PISpLdByp1MxYDOXwFZMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MjUwMzEyMTdaFw0yMzEyMjQwMzEyMTZaMCAxHjAcBgNVBAMT
FXd3dy5qZW5uaWZlcmdpYmJzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAMtkRioOSwESXRbIue91xhNoWhTO3xxEnu0JgCD5abbydNsNpNGDgZvm
QX/MgCTUhlXy9cwY358SLGe/jrDZypBWrUF4cHA5zHej6hCa9M9quQL0KfJ+ss7m
xn76R08uwWny2Qigp/hKg52XMHXuODK47LT2NZ3sxCrKv6zgk+108jpfAOUjhhm6
GRCIkcVKL8v8fRvFaVrH43MXvnizDkTcFQCi3pf84qctGSE+PfXxaayTjwpA4UKy
hAz5W5y8IvetLVQdsjU9eqRdWcjm1F/03g9KhRNwg1hifNtAFuTbLc+LI16gJ5fU
bISLXP3hN1qMu3QsxPIOmFa2sDzdrz23s735tOLlavNPxTCfOrl6kSH6/LxP38mi
97tYh0qCs5YBNIjz91KSebreoyXNbdb3yTkE3It5+yT6+qG/PyVCtmLvWmz6FGUF
gXs8akX1qVjUy3OBJZZ7olotu3ZFtCkJ7uaf0OwMqziO98PjZVlmGTITCYY1gRyL
cvsXgf/rmJFD8pvHaLwfMJNpLq2y0iBU+T+eGtvaJ92z/oED4kb9FlSJUOpfMMeR
jnPylP4HfVf9/jpyZhnpn2MGnY3DOo+YRgYQ7ExpRPFtN/mRfITM4cx+a6tFCDOK
bz1aY+9d9lA9YbwBXI5jCgCoFmpR+kd/PcuMi4foAP5vz/koXjApAgMBAAGjggIX
MIICEzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFE2pqwnUSzsPCX9q/FI0ekCrnxPz
MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkw
RzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAC
hhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCAGA1UdEQQZMBeCFXd3dy5qZW5uaWZl
cmdpYmJzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AHoyjFTYty22IOo44FIe6YQWcDIThU070ivBOlejUutSAAABisqJ
tw0AAAQDAEcwRQIhAI6K7Zn/e3FTV2tSeuxNh5z5Q+ihemo8SoNlaz6ivq+6AiAz
TGUhWfXyMlC9RE2NcJexbtj5AftJPSpqOX08l25G9AB2ALc++yTfnE26dfI5xbpY
9Gxd/ELPep81xJ4dCYEl7bSZAAABisqJtwAAAAQDAEcwRQIgCnttT/CGfm6XVRcB
8HVyjbViZ4F0ZDTPv6p3h31WIq4CIQDnina6LR0ESAOTOE0LGfxVWKRhf8tv8kdi
reFfUzpK5DANBgkqhkiG9w0BAQsFAAOCAQEAcGBqUVUl1MlBa3dNF9Ad/6A4/iU4
Wn0rY4eYZx/Wz6hgPtchazGhcT/TXRwrM+3ReZZDcpZuoRPBWFlQtpZD3g47Mz5e
fLUZsRHPRSPIM73Pzbot+B+EcAlmfI7LOZK8TjPB+hj2UeARnZUt2FvcnZVqD85t
R02hkJ9TUNs6AM128zuOAzYiHEj3hdnmUm0G4kdk1qkot4CVOG5ZrIXofGDq9tIm
CLFGcjrm2jbc/jwnWkafl+Bd6yEfHH1xjEcqsnUCJtv1VJ+xVdUgCosPsWK93MRe
M8qFLtHG78hUYjsXxJlSlVqOmS7w5mshD5vGjip8DJ1mPVNJu+QNFGb9Xw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354279121857186401560429270735798822437209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 03:12:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 03:12:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jennifergibbs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829765724528673331924544531335003086465486966388028783694013898955876141643902415760300451550579309186056492279391589878387874924803519497236983547499135411697157058270681651279588647189608952078394876303219475413262006547343610833460250620731076807021170985274540819660875654367453718357833277338492971932302431420665449716939210384677597014590821182185383764213176337431672042742052071342701470223888842869589880760160891728094622892996037255591818969292572346508780307378540831182560391909302902590064509884211889934115441283764111099035579808289918111292165008601293897026163740156451516845193969522690106873656584668292606490264548377550278659418576380139075096697641841553124182276702306904928218407537940691478061948517347376431055353720923560310314291760014892235498926477087618739930661081697228130878873964227917004334105024202899072977186372909974913553235928155912195121990111346555823455273095488432193253994290202897004054724512115618723191836806552129200729436311942056176968017623308392510374733158796112721114980070008952648931770620982291168323620211244870728176991294374499798535722601731181579063021448152704213972811949973072596282335875249664592716123128866172628707488928443893518400302909562011901037668872233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4da9ab09d44b3b0f097f6afc52347a40ab9f13f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jennifergibbs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca89b70d00000403004730450221008e8aed99ff7b7153576b527aec4d879cf943e8a17a6a3c4a83656b3ea2beafba0220334c652159f5f23250bd444d8d7097b16ed8f901fb493d2a6a397d3c976e46f4007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aca89b700000004030047304502200a7b6d4ff0867e6e97551701f075728db5626781746434cfbfaa77877d5622ae022100e78a76ba2d1d04480393384d0b19fc5558a4617fcb6ff24762ade15f533a4ae4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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