aaronjensen.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e1:3e:6c:11:41:48:2f:09:db:42:0d:85:96:b4:1f:22:e8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aaronjensen.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e1:3e:6c:11:41:48:2f:09:db:42:0d:85:96:b4:1f:22:e8
Serial Number (int): 337983363606264414376907035299522507907816
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:30:5f:e6:2e:53:27:d3:5c:c4:39:c2:12:01:c6:05:4b:c4:af:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:b0:c0:fc:d6:9e:e6:9b:bf:a5:96:7a:fb:70:79:25:81:f6:a0:1a
Fingerprint (sha256): 58:38:f9:28:83:4c:ff:94:d2:01:61:66:a0:f8:8b:13:1d:f6:f4:a7:4d:d4:3e:7a:77:aa:d5:a7:97:df:c7:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aaronjensen.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aaronjensen.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaronjensen.com

Other certificates including the domain name aaronjensen.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for aaronjensen.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 337983363606264414376907035299522507907816
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-28 05:50:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 05:50:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aaronjensen.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797773033317081538962464533357553564876183270504681436294668927649748257317196940604734619140642890016028106282184841076542241569776496464966031840417147945126746666068875536125694491411190747595880054150438176193590703262299110492200466943843457668183010837256106489574077111612254958971864470208871123020396265854574328910431746905666275920931374144909616246551284715130460451317267489442136570751433134153949894810877772133510296104278714034880080365968127902194298919195492345378621885610644675168297499204000786732374746349435781816260665793113051284375641064676298983182037494017868144285293862906003904279950745952944664222697678914213371002004303165057979967297948995152006529492123189134872296219935812211563400768400579279022981173685990875684027798707414488638721234466005098610718997776331974672115286617889909972069573730400425188857773679051088338958957031355932442617745539915999816605308370522141624858655820454511929951444032463187405145354341714818135904091648516191638200898626224124351325220855629838427332511043294107270128327043500571204043141266703992086409587647819203228781547982552112002129187898533452937071586653626039848080674375494920458679777397408865001466518787600619598381145529963847601340039627791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37305fe62e5327d35cc439c21201c6054bc4af10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaronjensen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016932de77dc0000040300473045022072025c79686d7ed931637b3e1e3a63a0e7a3d15457edce579aa50c8c8eadd5ce02210094a357bc9c040349e33eced4f3eb2a306995b522737f551093a47ae427b48623007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016932de77bf000004030046304402206b5ac274822260f3d4c582d627f0d461a3adec04459a4599ad926a14417f020202206057489c7ead3494179bd8825311d59bb384e8a8f9d78c3472c6e8637b206f96
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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