www.joepena.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:02:81:1d:1f:07:95:24:84:68:70:c1:89:d7:6f:f7:10:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.joepena.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:81:1d:1f:07:95:24:84:68:70:c1:89:d7:6f:f7:10:d9
Serial Number (int): 262189044146543220788277748314261218070745
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 14:a3:01:c9:2c:09:d3:99:5b:52:7e:71:9a:66:54:a3:f8:6e:c0:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:3a:d5:2d:f0:46:c7:47:74:a9:34:44:5a:53:29:24:5d:9d:c9:86
Fingerprint (sha256): 50:70:61:47:63:00:4d:2d:ba:31:6c:4c:40:9a:b3:84:35:46:8e:44:d0:6f:27:01:30:07:d7:7c:0c:c9:69:83

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.joepena.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.joepena.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.joepena.io

Other certificates including the domain name joepena.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.joepena.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0Vz1KoNVG60hai8+oiMC
3v1oyBuuLoT3sE5yWRWFdCB5NkHcj9lZ5NS4T7Y+VPkV9RqB33Sk/hdfwt+L2q+D
f6a3psTAMWiqBXZDPf5BJ3cH+HAOIQRpMnaRZ2GZ8guOliBeuN3qLZwXKwiCQozC
pN+CQIZPk1WMR3ayrtC06i8nXQiSGWQl1315vd7hpmg0RfOBfHUVVi0SQVNDXlf5
CVvgh5C0Hfm1PFlH8I/K3PenPloom19OH4CQ0Lz2bE96bBKmNMRmHAYhgxAX5KP6
tnM93YWwPNCARoecdraLRdr/ELnnuck4OpLX4v8Nb4ybplioQzXqte0L+B2SGGrH
lfDGcLE+RX4LDkBGl61V5njD48uhvw8AVNe5hzh9MKYrA1/jE1ccZH6BEU1VWApZ
XBBJEar3Di/1KDXv9WqUqIFuTAk51G4em3kdN88T6s5kXgVAY8vLEbObsRgxg6QZ
2XA/WLg9Haq+xCcZ3HrtX9FIviedSDRpgGxErsiur5xUNI/TLtLiSKMNrtqKYOTH
JgoLLH1HY4fyMIdd+NHMQyxRSb9exJgKsExGv8bioBhYaPW8Uq1aw+sZjOmG+4LM
MsAy+imhddaIQqA8jDsU/DStEHgZXMAZxbclVJ2qzNQ3fjFE/kb6zJlN3w0HhubT
/DbgNaj6wB+ijoDjFwKOVl0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262189044146543220788277748314261218070745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-20 07:01:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 07:01:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.joepena.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 854126993995789994366536971274880355178485725745154222623076659351888987794985354589750990996643423960182363854111569483967770677066390551826288956735550967516452614716109893978673506658005895055694590962507228894466626934933801290416691042309149540342446673332102395512571358386026864109401265901137782590101374833771250139347035907825934728728891265987386149197825776722340334116306844488733508148436011942229271278771304378475917569795846544882271478831279751791122185818795757294554837119264001939049907439810100730047868623826244702628267448075328419924151902781993432751492867369202809388553841542175159549296759992781888468591956844588985982934167952444824283966337313188415201573840317514333678459518079256071748136049129830514710790950070818312804335438706274486634386368259305081982606971349519318563971692171441442269768608990528264883917751133148208410031713643876047441904413086834133416950083376764220504854554559107729814037796061740059746190146231572357474134809172550363823128524484456108014268421324338584806119208697858554727497933902770213312283064090506848864153296567677010268186322897620534093122517639899696898350515545149644965025969081236157184201737199718749062828326993876650171827171023837329105957574237
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14a301c92c09d3995b527e719a6654a3f86ec00b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joepena.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c0e662a97000004030046304402202fa7429287de93dbdcaa30c781e57800d95d95f2a855ba1775af62d4538387d002200d04fe8f81ab9b0940283236a65d82dcb492bc020eef0ab9c84814189770970200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0e662c9f000004030046304402206f680e658cb37918bc26d7c2de62e182346d9b095e51c8bd1c0177d1aaa49b080220592670622534ed9df7ed19f1745e1b8c7f5da6d3916fe973a6633c6326c97d24
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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