www.jec.co.uk

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:e2:f1:bf:a7:97:1c:d0:40:36:89:9e:b2:b1:eb:22:94 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jec.co.uk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:e2:f1:bf:a7:97:1c:d0:40:36:89:9e:b2:b1:eb:22:94
Serial Number (int): 330375556671118711947402023025338833642132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:06:c7:ce:9d:09:7e:3f:e0:8c:f4:4b:0d:c2:db:fc:b2:52:90:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8f:a3:9e:17:a3:6d:9d:a0:b4:bd:35:81:92:2c:85:48:c9:6d:17:71
Fingerprint (sha256): 64:52:e7:e8:45:f5:7d:48:f6:75:5a:a7:d8:ee:04:e6:cf:a1:51:48:e7:33:75:00:06:ff:ae:8f:04:8f:6e:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jec.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jec.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jerseyelectricity.co.uk
jerseyelectricity.je
www.energyforeveryone.je
www.jec.co.uk
www.jerseyelectricity.co.uk
www.jerseyelectricity.je

Other certificates including the domain name jec.co.uk

(limited to 100 certificates)
jec.co.uk
careers.jec.co.uk
www.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
www.jec.co.uk
ph-expressway-e.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
*.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
jec.co.uk
mailmarshal.jec.co.uk
www.jerseyelectricity.je
jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
www.jerseyelectricity.je
www.jerseyelectricity.je
www.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
GIS.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
*.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
receiver.jec.co.uk
receiver.jec.co.uk
jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
*.jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
careers.jec.co.uk
www.jemail.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jemail.jec.co.uk
jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
webvpn.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jerseyelectricity.je
receiver.jec.co.uk
jec.co.uk
www.jec.co.uk
ph-expressway-e.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
extranet.jec.co.uk

Certificate

The complete raw certificate details for www.jec.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/ewG1ArLB+gJhiKGLTf
CfSfIhWaG85T9rzVz1kHG5hV39vixkju0zulq8gw7Xvr6BERDdm6bleu83RRaGzK
c5rUbhetcSnQGWPHF6qSzsRQpwIM/OPo8C1Zg8TdlO1lqFg+kY9TBPtpdgpopDQF
USTl4ilSXTJ9npr/tU8aRTIMfLjFrSxP7QXqOzum2QLSO9vTstB/3tg1WAbL5Ozp
JRsM5Ti2uxlA0vLPxM20f6k0P7a+0fHiUdBaLwIQyMsQhMiTpLup6Rn/7+Cqr4jA
ShpWA3VBN8VHz+tXEkju9Q+yu0LG79GJZIGJUsbl3MzcbYtDdF2maGnESJ6jnGh1
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330375556671118711947402023025338833642132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-21 09:35:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-19 09:35:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jec.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17669263854239491192498793457594506061861676134416328552551129484532060664009596423803132602003288298087308009043873543984134762259423192219863728793361660724102769640451031163429132992855750599634950093088617894659267731515389230012999452287530386274750781542925025979316281151625174872583265601448233476451171962295833781073339005263396500147792639721568001241798098140989659025157370610163848885128847827075924535873166084522552791027985709019224976121160983066273321155296486387776593918565052160224150378033883750311808440448514886967750240876496510627840875029434494330161191255957865182755495913118979624301977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c06c7ce9d097e3fe08cf44b0dc2dbfcb2529085
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (146 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyelectricity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyelectricity.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.energyforeveryone.je'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jec.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseyelectricity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jerseyelectricity.je'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001741096a13b000004030047304502210098b73c50a804ec5e729a95dac7137790840c2e31663fa1a200c3ce054282adb002202e4e9431025b04bcba1dde879fef18e1c6b258a6ed017768ea167821577b193100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001741096a1680000040300483046022100f4a93df8f383dcf43d72873ecc6c0eff4728cab43f709280b5f6ae053fd65e84022100f2d114dcd59baa289e620d0c9bb2a635175d1f2e103b7c0f2b6d200b1cf204db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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