ujf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:c8:e0:ae:f1:53:2f:22:33:30:c6:ff:61:49:c1:6f:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ujf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:c8:e0:ae:f1:53:2f:22:33:30:c6:ff:61:49:c1:6f:fe
Serial Number (int): 324896390264487591558190739530961519734782
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:4b:4f:a4:a5:a9:81:05:f8:cf:62:bf:0a:24:05:8b:19:5c:8c:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:6e:7a:04:b7:49:8a:98:33:c8:b2:3f:68:2d:e6:1d:4a:de:d3:e7
Fingerprint (sha256): 47:8d:1a:cf:6d:93:10:68:db:c8:52:17:ac:e0:db:7c:4c:2d:dd:f3:41:83:14:15:b0:79:4a:8e:01:24:9e:e2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ujf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ujf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ujf.org

Other certificates including the domain name ujf.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ujf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324896390264487591558190739530961519734782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 19:51:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 19:51:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ujf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1002379888949142434449439762612919612102934049158811093011535466084951980662437326255978564055142970166574646669101781224046171736188992500810868704811883508315835502968117164501878338183724869878570070246889975964501699412846688021181595629581684570642239757079512905865523551733561916622979583877961286034776119709949023678142622538839858597068848192484991138295891968457331856443179069964889049522019295354483679580218982473687784798800505166293788115465342586983782400986831540314149527701431025668341019302728809369311291842784670131255174028073921635827236308610200009683882423535920097970842925854396356533660238680884416813163245413975489796135331131804730280452934066238202971029329212203895882665644624083093966998309363562160031852773124935963457965982992885138025791795725439557479549693266317058623772266146190552656345539814086133220948468051479439699467403907481591041665237535857474209150357354973542942461503837032873145510017797341429820589715987590004949963526120557731235839728584911599705561421127176218174187777682149543355553535035313101262443402124357576934391518338431754812521137515253502673290529380591816720062151869770718915183837158755131910304264269200098481759756133777221695948904001348896310791130893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							914b4fa4a5a98105f8cf62bf0a24058b195c8c87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4cc92e7c0000040300473045022100aee6eb4006fc9097ee55c7bf8c00b1f0c4f3e6507ff534ca5ad661a29415e6260220577fa9907ae7b4206c3f6b9aa44ed2579661128d75001694bf9cb1cf66461cb300770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e4cc92ec90000040300483046022100ee166f0073070eee109494add5b199483f2e703d396644ed0d719abe1397057e022100876026db1a0c28e815a37e7f71e3d23d80cff3a439768b3a764d74332d69d53a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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