pjaca20.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b2:1e:f7:ee:84:fa:eb:8d:80:f8:a7:81:56:54:c9:c1:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pjaca20.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b2:1e:f7:ee:84:fa:eb:8d:80:f8:a7:81:56:54:c9:c1:9c
Serial Number (int): 409060569213914897800823813302123080827292
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ce:cb:5f:3b:78:85:5a:06:3d:5e:22:3b:6b:12:b1:16:68:f2:a2:1a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6d:73:ed:cb:b2:39:29:c2:38:45:1c:7f:43:19:b4:2e:ef:68:a3:2f
Fingerprint (sha256): 3e:49:1c:ee:a8:dc:42:1d:1d:96:04:8a:68:0f:58:da:5e:c3:79:17:78:a1:08:81:fa:6b:05:8e:d0:bb:9a:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pjaca20.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pjaca20.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pjaca20.com

Other certificates including the domain name pjaca20.com

(limited to 100 certificates)
pjaca20.com
pjaca20.com
pjaca20.com
pjaca20.com
www.oilfieldsuperstore.com
pbfc.ca
pjaca20.com
836.me
pjaca20.com
342.me

Certificate

The complete raw certificate details for pjaca20.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 409060569213914897800823813302123080827292
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 06:48:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 06:48:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pjaca20.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 642037629252647292406942470143160635069068630070303839366987094582322533935390544131075420572547845769438721389383060266189580345749112349729092354759260961013392905878070032181263182293026499906871860631794320214491351638099648553811299893967279379915371745650251463904970216344309150843859481103053854101906972959093340804561233712846528867169671027153227443420517115998052069530737116077046162370771379995325221364849131719794659625966123997174875369162459152156940056822700827704191943131774979404922009062407261482039556177627903357261666885948588256349661737272027905585478141238403718534009562866072818139671256089859993364930883554483669937149221321026619626200745773603984776567004012354587505677545796313965953816586462190063148244738334920841907248171831472304841054226891407403795694503413047715415521838664292870656521040246805540994956768358049547768013437734607003893616133136137353828686871444313638954746755520083037387704823786575724800472031144635096335774787085597797435960113864848259953130623495575988455436950434096308677494637121840866460233859308449818396189574994377137401357425044997602976376729822891071274566962865439259949456443267944419971802764891085755317358744191627379821909581490142849052300292939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cecb5f3b78855a063d5e223b6b12b11668f2a21a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pjaca20.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ecfe1aa190000040300483046022100ce1df86575c72e14e413815d50ae83101ece8b9130b589b35f1b225a5e0aaafe0221009b23a139033cc3952612cdac0c4595e14fa0f121d07b4e7e5e29b2e7fd1c525f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ecfe1aa4100000403004630440220188b2c27717f7f37fbf35cd803c2f8c0b24351411939c381e1b17dbf2ac09dfe02204c80fc7cf45441a2d925d7da399ef0f006ce80a5a7fe1df1c8af0854fc4631ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001a62041edad964f749c716e553eebd3d8183b841202a832b1a1ca483f182b758772053ee57c731782c41aca045479b1bd7cf8b307aeba196796d37578645a1a67c70c79c494d1c864831af81c40ac4b33eb733c83b54b8542abf9acd334bf26dc468ed2f933880ce4cf6c923cb7edbefbf7c0ac33f09f903f85fd8dcaa7d1e6df73898f3ccd32aee3cbcf1636f93c17ae65d81f26c4f97e88f09e510afe56b7f9d54747d851810d4c13195fd9192ed00159860d75b4425f3eaece02be89aedfe2d1556623423de1a46719928504cbaffb3b02ffe5bc5135b958cae8d753abc83a85647ebfd434ba28bb40e59474d9d3bc3548299e9ac9451d1b452fde57260d5