domainjail.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:71:aa:02:cf:25:f0:0b:0e:ab:67:72:e6:f1:92:82:d8:1c was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=domainjail.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:71:aa:02:cf:25:f0:0b:0e:ab:67:72:e6:f1:92:82:d8:1cSerial Number (int): 300014748602688458818021608505122960365596
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cf:00:ae:fb:b5:2a:7f:ea:a4:0e:44:67:38:37:73:da:9b:89:4a:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 60:64:7e:b8:24:aa:52:e5:05:75:b3:30:d7:d6:bb:22:88:a2:85:aa
Fingerprint (sha256): 57:a8:65:ca:aa:9c:cb:f8:f2:5d:ff:68:20:b5:2c:7a:1b:71:8e:51:d3:2e:35:72:ed:70:a2:64:51:7e:c8:32
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate domainjail.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for domainjail.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
domainjail.com
www.domainjail.com
www.domainjail.com
Other certificates including the domain name domainjail.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for domainjail.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgISA3GqAs8l8AsOq2dy5vGSgtgcMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTYyMTI2NTFaFw0y MDA2MTQyMTI2NTFaMBkxFzAVBgNVBAMTDmRvbWFpbmphaWwuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1brscizMkrBlcHuXn3+gch2GCZbA0by8 kT50GUjuOCaMePja/HGP7vPi8B/Q4AhUkdMKkjbC0VhSSN1XGYxoBl50NEN65X7a n+xQnuBc8S0t3K7CRWV2Aa5T6JTkRKdHIPM3OzTyjY4FA4YFzm7WU2ig1FefAB1j TBijSfCiyOGsdeRmsSUkY2h6E2i+mxzEofK45YTldQVLYr6mHEgMHPnLldaD4Pac yqVMUCmMIRN11j9iLmWIsIbW/rLGQmTe0TlfOL0HqmOCjAhVA+1u7Dz2uUmFMNkD Q4QRZ52sTYHBvZoPd7bEMHV6nerU/2oELosVk9MgkJazVxrvM7GFVs9GG+F0moKy fz0GvNqdGUnpcbrKCAQFFfIgQ6+hZWhqRzKhAr71YbSevQzcRRuUvmZQhKQZW9BZ raodiWvEg5RE9GhozNpMpdzGNbrchLRE/7NPUnXQOyfoQe7tPkm+FuN3rrBSOOfL k3idlad2eZk6of0mHhrRYJeJPrgcWtrXQ4upUEYiuhdiPRK03GYj1xBpoMk+agLC j2rmMfL46J2Xrn7L16iSLHFiFp+whchNTDZffvLxJ8EyQgkHHrwEzKPSamTuLP2z GycB/hYaF0aZ76JVGpVpmE9dxwWD9pEuqmuJgWZJTH24SYx+KC+YRMyVO6pzCnYU jVSLXe0Qy7UCAwEAAaOCAngwggJ0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUzwCu +7Uqf+qkDkRnODdz2puJSq4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAtBgNVHREEJjAkgg5kb21haW5qYWlsLmNvbYIS d3d3LmRvbWFpbmphaWwuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQB gt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3Jn MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcA5xLysDd+GmL7jskMYYTx6ns3y1Yd ESZb8+DzS/JBVG4AAAFw5XTyCwAABAMASDBGAiEAyIjSCIfZ3xDs6dvxPcvQXbFI rUev671c3RaW/MbiCscCIQDXcEEuTRn9J93eica9VYMzithNm5JbtI+vBcbTlV4J VQB2AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp06IcAAABcOV08jgAAAQD AEcwRQIhAPEA0/2vCDseRtDpPGsLw25tYPShCVW6xaesfh/3wTp1AiBzrD4r4o+L gQFAnGQpPeam7HN20+NsTq5CkswmNOr2sTANBgkqhkiG9w0BAQsFAAOCAQEAO8b/ z0ndeiBzZZLJ+TPvtqmQGpV6T4IWfIUBJyTk58DWk3CT0ARigF6Bw3WE8jnput5Y kbvtAhqoALHdDQrB6Prwc8QEeNa/FXQOwKC605TtrRAi/XrqMBO6jPcULaIeIa+a ykwQf+7Ao6lBHJ5hXTNDu5HoALCZXsZ8yhbZWOedMQZ6Wt3eewYsECTnYFaaBwod TF2EHaLi8eJagpLauRe0juicZ1OAqzk9w7SRndMUPnaVcFaDJctzl5UxQiCXVGgy 8R3fJkAk72Iz/Hi+dilhqyUAbIWx0VAKyOWk5tuLHhNVr54uY/C68iuHMY40DCxf 5kKDMSlBwJzoe/A/WQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1brscizMkrBlcHuXn3+g ch2GCZbA0by8kT50GUjuOCaMePja/HGP7vPi8B/Q4AhUkdMKkjbC0VhSSN1XGYxo Bl50NEN65X7an+xQnuBc8S0t3K7CRWV2Aa5T6JTkRKdHIPM3OzTyjY4FA4YFzm7W U2ig1FefAB1jTBijSfCiyOGsdeRmsSUkY2h6E2i+mxzEofK45YTldQVLYr6mHEgM HPnLldaD4PacyqVMUCmMIRN11j9iLmWIsIbW/rLGQmTe0TlfOL0HqmOCjAhVA+1u 7Dz2uUmFMNkDQ4QRZ52sTYHBvZoPd7bEMHV6nerU/2oELosVk9MgkJazVxrvM7GF Vs9GG+F0moKyfz0GvNqdGUnpcbrKCAQFFfIgQ6+hZWhqRzKhAr71YbSevQzcRRuU vmZQhKQZW9BZraodiWvEg5RE9GhozNpMpdzGNbrchLRE/7NPUnXQOyfoQe7tPkm+ FuN3rrBSOOfLk3idlad2eZk6of0mHhrRYJeJPrgcWtrXQ4upUEYiuhdiPRK03GYj 1xBpoMk+agLCj2rmMfL46J2Xrn7L16iSLHFiFp+whchNTDZffvLxJ8EyQgkHHrwE zKPSamTuLP2zGycB/hYaF0aZ76JVGpVpmE9dxwWD9pEuqmuJgWZJTH24SYx+KC+Y RMyVO6pzCnYUjVSLXe0Qy7UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 300014748602688458818021608505122960365596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 21:26:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 21:26:51 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'domainjail.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 871943021745979950421279118128518860043491642085646238013452856892105502953095503041120681097276676370711155411500679115044452169653036644688456550653437535221449238987790219146111416173739587257535087169440197359930963994958985844190387633675533958505617944636240638963624018120867741682446712075181997199459297916639809600199722412604487094418765743491372428444628402180879669099562095705137444167120462261008729981126859778816809425250935258577727477274052282405317607272918892992641562355930287826274819153296600239094025828522260155729889809459594081050903189706900354428939628156145617020991313671999238114374582149599870150487988820724020316968070919445061033025819917254000825677674211296232665764101374607673234409016974794707583881297606150480913137363399696497925560904327137086738672075874573906226818153424731174307508977180272387746254624462961397835350464300906621716005302833433831579082699825578082158284155538225033356177061041346237438052456197238949664041560661400318825128879017150999330261462079136920436277898971783090828843786005147047078625562085399958529091995076263043929434042696529253299953653316457345373133016266760114593384830111695262704278549832872423913251428043798209717262745706143708586167028661 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf00aefbb52a7feaa40e4467383773da9b894aae . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domainjail.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainjail.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e574f20b0000040300483046022100c888d20887d9df10ece9dbf13dcbd05db148ad47afebbd5cdd1696fcc6e20ac7022100d770412e4d19fd27ddde89c6bd5583338ad84d9b925bb48faf05c6d3955e095500760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e574f2380000040300473045022100f100d3fdaf083b1e46d0e93c6b0bc36e6d60f4a10955bac5a7ac7e1ff7c13a75022073ac3e2be28f8b8101409c64293de6a6ec7376d3e36c4eae4292cc2634eaf6b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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