zajac.boston
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6f:83:51:61:2c:12:21:bf:6f:ad:91:87:e2:22:a6:e0:a2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=zajac.boston
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6f:83:51:61:2c:12:21:bf:6f:ad:91:87:e2:22:a6:e0:a2Serial Number (int): 299282751937883656918295176845952264102050
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 6c:ef:b9:9a:20:30:ea:7a:cd:6b:22:df:ec:5f:95:9c:89:de:65:34
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0c:82:48:e9:4c:78:2e:cd:9c:76:09:9f:1b:a9:d8:e9:69:d4:a7:af
Fingerprint (sha256): 50:8a:33:20:f8:87:74:eb:e8:02:1a:a5:34:65:14:09:74:ec:57:67:c6:95:55:66:31:60:92:db:eb:c5:7c:a0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate zajac.boston
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zajac.boston
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zajac.boston
Other certificates including the domain name zajac.boston
(limited to 100 certificates)
Certificate
The complete raw certificate details for zajac.boston in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISA2+DUWEsEiG/b62Rh+IipuCiMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjQwNTUxMzRaFw0x OTA3MjMwNTUxMzRaMBcxFTATBgNVBAMTDHphamFjLmJvc3RvbjCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBANiL2wRFB/PA7m0TlVHirtIPZ/TBvPg5LQ8n VCNKULac48LMDc5ERsOYUlSwJCfu1s6vdV+c3i2tBZHl8Akc5STsJIimb+oer/IY NBvQrmjmYttksujIU21ZKY+G0IYTNpaD1wooKqBqBAJ+u607RkU0e+sodqNAmWeb Rdc5qX4+K5SXXdRShDOB92YyOYFuz9f5sebYu4bm0guZbhPP4PZeC7DGcffEIQJ/ lbfAi3Ov0BbY2nmo4w7mnLXOin08lw7UF24KKNa58jnBg1qrrVWm/7ecyK5sBffj d4Ll4r8P1GM4K9FPnrdRBqbK/ju1WbsDYh3v9wykWlP15QVOVHTdL0akQIUvAgOS pXXWeXEuRGmrG2DsClWRqRZCaPhugvwfETF9qsDi1PkrnjrJH9vukdN43goCgJ31 2fM2vcDf/sK60dY900uXS6dcLXotKlFGoVi+x9Y8nYCe7uaD00GvBVIV5RsYwJtc 3OVVN6ZGATys8b/62Of9RKFvPTB31aJf1zpohRG/858BNJw50H0LkyXRrvpCg4Mo aMpAMRvMyyrrKKOn8jod1G6Eibk+OiOMY7jv73D39GwwfenUoSPwNQycGpRCUq2L mYthLntsdAIVneTWQABGSog8moe9fIPCZ+mM+DH4094DIad3KUc444gvz4sMGUNh yqo7Cw01AgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGzvuZog MOp6zWsi3+xflZyJ3mU0MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMemFqYWMuYm9zdG9uMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFqTh0qNgAABAMA RzBFAiAPRwerSM4HPnWfjGbGCSKOND3jPMusn+8Dli8vkZ5LzwIhANXYiDPWnPwb c8JNRirBxE6rlBGDJ2MoVRfV7YxD4xuxAHUAKTxRllTIOWW6qlD8WAfUt2+/WHop ctykwwz05UVH9HgAAAFqTh0qQAAABAMARjBEAiAzoLTspugDZbS0CvTqylx1/Riq tXvgJ4Q6oYo0/8uZtwIgGlIrAYJ+fqJw+h0YRfHINRlZp4ZF/yB1brCRpFXmZjMw DQYJKoZIhvcNAQELBQADggEBAIsGoEsJMsnzvRc4NnOcKVqVPIYiQuo4VzgTB4s4 h/RAARhRLrfW0WV4qzajYo7QoIbJhAcwgyp0+JEbE7DgOsK8ni/FwBZJle/UW5A/ BwnWHNHH+8pTl79r/bi2xPNMb2d9JTjVd1zMokRSVm8U3oHiCVl1fY6A5fNXI8N6 ISUNoeEe/XSqqez8fzrSfe++aKnL2pXi7/vKDXYFWHBKHzJ9ZkPMjtolhhQa691o BUvcCFJ3dmHTjObJy4L+hOV3oKaVHC0SEFKu0sgd38wKSsaMFFqbtWhRi2RGKPFB pMl+oWRM9+nkDk4x2CJUkxdi+4AkGnkJRjPtn2ANvSWCExo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2IvbBEUH88DubROVUeKu 0g9n9MG8+DktDydUI0pQtpzjwswNzkRGw5hSVLAkJ+7Wzq91X5zeLa0FkeXwCRzl JOwkiKZv6h6v8hg0G9CuaOZi22Sy6MhTbVkpj4bQhhM2loPXCigqoGoEAn67rTtG RTR76yh2o0CZZ5tF1zmpfj4rlJdd1FKEM4H3ZjI5gW7P1/mx5ti7hubSC5luE8/g 9l4LsMZx98QhAn+Vt8CLc6/QFtjaeajjDuactc6KfTyXDtQXbgoo1rnyOcGDWqut Vab/t5zIrmwF9+N3guXivw/UYzgr0U+et1EGpsr+O7VZuwNiHe/3DKRaU/XlBU5U dN0vRqRAhS8CA5KlddZ5cS5EaasbYOwKVZGpFkJo+G6C/B8RMX2qwOLU+SueOskf 2+6R03jeCgKAnfXZ8za9wN/+wrrR1j3TS5dLp1wtei0qUUahWL7H1jydgJ7u5oPT Qa8FUhXlGxjAm1zc5VU3pkYBPKzxv/rY5/1EoW89MHfVol/XOmiFEb/znwE0nDnQ fQuTJdGu+kKDgyhoykAxG8zLKusoo6fyOh3UboSJuT46I4xjuO/vcPf0bDB96dSh I/A1DJwalEJSrYuZi2Eue2x0AhWd5NZAAEZKiDyah718g8Jn6Yz4MfjT3gMhp3cp RzjjiC/PiwwZQ2HKqjsLDTUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299282751937883656918295176845952264102050 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 05:51:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-23 05:51:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zajac.boston' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883431871814432638918385919223257601410418312753812536649853386957818928630767616720634314418139544251853508662840731125158657001248982342501567103864973951291977227821362321673278638979055705715878252776758963469376118853913385587507697199557527180176899578649406635492983842839292053648778152497495466444507128672220389177267956571188916567117430608452000056233284879976316144914830946360013455616838765017908986305765531914598588700484111683077500023652445819542518572503603191992002556833941813495242711769072225413900254324670251470438054124970895869040450401475224944784502213980949690356588840676074708674062243673211835248553891131672422489090420553416170425585770777610017625974205714751193042641214791704839745975660331512107279092332211016090118505772327568944262338394371735149632895608853822977189904522083193635118336379329359137802934402606586952598639346587237719458172428210408130220843785099519139949927401095146769364230588494785579235798820332336232793801760990799690040464191000072045595451103250024567138521357900567661309782499838859783610112541653868163316428460326368582877209359933128289815756904143102721958976802196196642178408020015764586386058047071901329685815283157534223560019868409675726469213130037 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6cefb99a2030ea7acd6b22dfec5f959c89de6534 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zajac.boston' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016a4e1d2a36000004030047304502200f4707ab48ce073e759f8c66c609228e343de33ccbac9fef03962f2f919e4bcf022100d5d88833d69cfc1b73c24d462ac1c44eab9411832763285517d5ed8c43e31bb1007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a4e1d2a400000040300463044022033a0b4eca6e80365b4b40af4eaca5c75fd18aab57be027843aa18a34ffcb99b702201a522b01827e7ea270fa1d1845f1c8351959a78645ff20756eb091a455e66633 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008b06a04b0932c9f3bd173836739c295a953c862242ea38573813078b3887f4400118512eb7d6d16578ab36a3628ed0a086c9840730832a74f8911b13b0e03ac2bc9e2fc5c0164995efd45b903f0709d61cd1c7fbca5397bf6bfdb8b6c4f34c6f677d2538d5775ccca24452566f14de81e20959757d8e80e5f35723c37a21250da1e11efd74aaa9ecfc7f3ad27defbe68a9cbda95e2effbca0d760558704a1f327d6643cc8eda2586141aebdd68054bdc0852777661d38ce6c9cb82fe84e577a0a6951c2d121052aed2c81ddfcc0a4ac68c145a9bb568518b644628f141a4c97ea1644cf7e9e40e4e31d82254931762fb80241a79094633ed9f600dbd2582131a