www.junkto.digital

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:9b:b1:04:8c:bc:c2:bf:cb:1e:8e:c6:e8:66:b0:57:46 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.junkto.digital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:9b:b1:04:8c:bc:c2:bf:cb:1e:8e:c6:e8:66:b0:57:46
Serial Number (int): 313266727035434008796872975090320353023814
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:77:3d:07:b9:5c:9b:4a:26:24:78:07:40:31:9c:4a:69:ed:5a:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:99:c0:2c:aa:8a:e4:79:e5:9b:7d:e8:f4:98:f0:fd:88:3c:f7:d5
Fingerprint (sha256): 63:c1:cf:80:f8:23:05:44:c6:e1:9d:d9:fb:ef:40:b5:cf:fb:5c:3e:29:08:c3:7d:08:9f:39:22:1d:bf:50:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.junkto.digital

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.junkto.digital

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.junkto.digital

Other certificates including the domain name junkto.digital

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.junkto.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313266727035434008796872975090320353023814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 08:27:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 08:27:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.junkto.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 726093542878629053540734817970738656354171409687449965883897010975638893050550590947249605296149363414423286835004214717704570702922464029559240181894747911912066682673088438599249240210579852229481412467805784473130966968097690036686373818991268914003992806652483592597675360359114756371675523963654243205994074495200605025692774788997897049239902450034668601339719294529601097621672286959731515894028669792394346937117458932952147929847420029421034362481755865242342699931647776631199838151611415502397689968053949165022671065845694843409645937649157518147429001032959432300029918588835891469658281323566801613298719821804518623541682057063945448110884224458473739926743206176319218501171998621053707901417942523489474961010621467930667441047013070192104957348877642472204562165990255161044056740377574862144384958824264278578741678484878504013410962999406409830702482249507131085773770078663017432827168623187126258156211045335471491260413537217097312828866686184764364465399665468913193519511600844851620040472530485242771617883518825423840461594056011179666586458123170240141109929711122253485669501552487934739498551437597749707615938263384177529080983334610235529244990819994558134560750909427387421962034895400504767267966521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85773d07b95c9b4a2624780740319c4a69ed5a28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.junkto.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701ef9d0870000040300483046022100c5fc4398203155e84de53a3d0afdcd0421e4d8ca4eadeb55516bd37be2ab35460221009cfc1a094e1268372d2bfe6a2dc7e8e13517dec673ba48efee4303ba8c4446c3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701ef9d0800000040300473045022100db9230a6a500f1c8f0bfb79401353cc36db4c4c273dd3e9295dabc64c234e3d80220369a6a3daaf95e3802bfe31645499c385931a6d7f8c7e8525698114e3d124f65
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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