www.juniorgeorge.com
Issued by R3
About this certificate
This digital certificate with serial number 04:ee:28:45:d7:bf:1c:1a:05:c1:ad:fb:33:57:0a:77:b1:e5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=www.juniorgeorge.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ee:28:45:d7:bf:1c:1a:05:c1:ad:fb:33:57:0a:77:b1:e5Serial Number (int): 429489878818398317293665803427868986290661
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: da:48:b5:11:4b:12:b9:34:0c:ed:f2:4a:76:02:95:73:06:d6:88:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ab:cf:00:ce:ef:43:8b:34:59:85:42:e4:1e:ed:23:06:89:34:fd:33
Fingerprint (sha256): 40:58:5d:68:db:80:c8:3e:9a:23:69:b9:11:5b:b0:00:14:76:94:e2:ad:9b:f2:1b:12:fe:bf:1d:55:da:ac:7a
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.juniorgeorge.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.juniorgeorge.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.juniorgeorge.com
Other certificates including the domain name juniorgeorge.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.juniorgeorge.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE9jCCA96gAwIBAgISBO4oRde/HBoFwa37M1cKd7HlMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMTQwNzU5MTZaFw0yNDA2MTIwNzU5MTVaMB8xHTAbBgNVBAMT FHd3dy5qdW5pb3JnZW9yZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA9c6XsxZoi7Wc0Qro475bCRSX8re7FhVkhSMZqZE6Ap633Y9MJWdHG7cj 1lcvTcLrVcZ7InovHc+pswxzwH3DOiGGnxAgtlVeKRQGN5OHwTKw1QEA4Ofhr/U5 REbSThfIlY7psLSno9af5w0JAXr1mGU/poFcRhOkDZChBWvE0Bh4SvvaoOFberSk bXBO41SUfQbX96vjLTUg1pNlS4Acb6d+u9Jw7cWJmbDi4l4PYiTEWf7A/SQQoYbw 9PCX4HjwH3xqhzeArKwDtG/iZfrDjgxwZGUL7NWsusMALhQc2oW2TABHmJbAfxtT dvtdPKnbIrZIegSH7ML6XR0QTtv4VQIDAQABo4ICFzCCAhMwDgYDVR0PAQH/BAQD AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAA MB0GA1UdDgQWBBTaSLURSxK5NAzt8kp2ApVzBtaIGDAfBgNVHSMEGDAWgBQULrMX t1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0 dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVu Y3Iub3JnLzAfBgNVHREEGDAWghR3d3cuanVuaW9yZ2VvcmdlLmNvbTATBgNVHSAE DDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ADtTd3U+LbmA ToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjjwv6mYAAAQDAEgwRgIhAIV4x+26 tMpZVvpq+WVp8vFy+TwN/r5qe+mQL7oCqBL6AiEA6FkWaEIdeJfj+HOHFbyprNwI srX8wGh1jl5JF4D8g20AdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1 mwAAAY48L+plAAAEAwBHMEUCIBdP/pM+XprRR1dglopbsuTV3PW+xsVWUxL8BQxX QVwhAiEA4q+ojymR3ADmk7ZhOED04Yklt94zjZb6f0dJKTGNmJQwDQYJKoZIhvcN AQELBQADggEBAKvXTPcH+IcFufoWNiFIVtXd/aN8oC/Z7u1gQNZdDrbsNdxT5uzi IsZhTwGweeM8cXkvlkoZ6WdShsIWovHH4666Kov1A8HKxZyEuT+8diRuhKjI2fA5 dvl+HNyxKiX/2497SOSuezqCx/Tu3PwtXGo4a7lu3ucFYbXSDi0BEIj3lby40E3b O1ndfHFZXRRxU4niezLjbpRn/ahGs1ESHbEuRNzcP++xqnX1VcEafJEk9l6ryxxU 1jHObpiNfHJoeLfPFTuqOf8+JxTfKsH7c3GzmKbDY4ZrSDKm7c7Kp18a/yZasWLN tjSZcOOsZ1HcR5mW/zfVIKMVcMwJ4WycT6g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9c6XsxZoi7Wc0Qro475b CRSX8re7FhVkhSMZqZE6Ap633Y9MJWdHG7cj1lcvTcLrVcZ7InovHc+pswxzwH3D OiGGnxAgtlVeKRQGN5OHwTKw1QEA4Ofhr/U5REbSThfIlY7psLSno9af5w0JAXr1 mGU/poFcRhOkDZChBWvE0Bh4SvvaoOFberSkbXBO41SUfQbX96vjLTUg1pNlS4Ac b6d+u9Jw7cWJmbDi4l4PYiTEWf7A/SQQoYbw9PCX4HjwH3xqhzeArKwDtG/iZfrD jgxwZGUL7NWsusMALhQc2oW2TABHmJbAfxtTdvtdPKnbIrZIegSH7ML6XR0QTtv4 VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 429489878818398317293665803427868986290661 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 07:59:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 07:59:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.juniorgeorge.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31030259313029787052435704560147162919233352337630803377504182644870983066193836794386335846064644360166101743717902259505308490868181913254834883410835394945518298597492920059308449311069158903526982306216585052339918502539482842875814313541917403446646628915288369479730166094653294242562934465503008662182257433051697767593567243294974993886386368128738740090096252364203174124965225131605252530431378782376284693388086285171970510621228127887784061342881366045862152430773124948422769163374353022591929111506981293153108559877921632524610615304637765461813019364378598001667461048295969207003088777290047515523157 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da48b5114b12b9340cedf24a7602957306d68818 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorgeorge.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e3c2fea6600000403004830460221008578c7edbab4ca5956fa6af96569f2f172f93c0dfebe6a7be9902fba02a812fa022100e8591668421d7897e3f8738715bca9acdc08b2b5fcc068758e5e491780fc836d007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e3c2fea6500000403004730450220174ffe933e5e9ad1475760968a5bb2e4d5dcf5bec6c5565312fc050c57415c21022100e2afa88f2991dc00e693b6613840f4e18925b7de338d96fa7f474929318d9894 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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