jocelynfletcher.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:d5:3f:69:1f:62:76:f2:de:3e:08:59:f4:68:af:d6:89 was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jocelynfletcher.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:d5:3f:69:1f:62:76:f2:de:3e:08:59:f4:68:af:d6:89
Serial Number (int): 334100456759384462185128729498866051700361
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:1d:45:92:e6:fa:86:fb:e3:e8:ad:22:ab:70:12:75:46:9b:17:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:23:41:90:1b:37:0d:16:62:22:bd:c4:b1:8f:53:38:fc:d2:bc:6e
Fingerprint (sha256): 6a:ef:1b:1a:31:08:23:ac:6e:3c:8e:d1:ed:a4:94:7d:1d:8d:0b:1f:63:bc:92:fb:8f:8f:3a:ee:ec:e6:93:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jocelynfletcher.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jocelynfletcher.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jocelynfletcher.com
jocelynfletcher.fletcherfamily.ca
mail.jocelynfletcher.com
www.jocelynfletcher.com
www.jocelynfletcher.fletcherfamily.ca

Other certificates including the domain name jocelynfletcher.com

(limited to 100 certificates)
janinefletcher.ca
hcconsulting.ca
hcisp.com
hcconsulting.ca
hcconsulting.ca
jocelynfletcher.com
hcconsulting.ca
mail.hcisp.com
hcconsulting.ca

Certificate

The complete raw certificate details for jocelynfletcher.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPXrcCCeyYcNbci25esf
XNDy7yighaFenw8yaHXAxFV+SKG8HkqFtRWjL2IWwTKQ8kSu9HPwR6QevFyPD8dr
1WVdIj5Uaday3ovYjUZedAog9P9/dRBC2tp6D4mGpQXdxQD0KcP24ZLCYpWY7WU4
RyFM0tDGtzeYYTx05JD2WyPLtQXAYxcLkIgXvcnGhLTla7EnqzuD62poAPJCOaiS
FjPDtHFOZdsbt+UbiM6skVt7elt/ZlFlMBaf9CEFq4sWhvZnXuTyIMBrHdQpjcTh
+N7qunR78HQXMelhweyTgs8DdUxACURDGVtmInoovRhavdHb0u9r2fGe2QfUlwgS
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334100456759384462185128729498866051700361
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 06:20:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 06:20:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jocelynfletcher.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25368928506963421496570387781160155615796509282739055708730284672134590664977363285195211405131639784040779903439012409367878375856524179279648922174818841207007861438864938073690369293035522504786605396099600409046450966426716366169893687642830395272074383433314741852677363237413678175384302575607275258472064234413357431129167887273117555861328015279322392377082649014723583470813189924547723404787600525123727425673681608266685844390134581919782761572762214995315420529291893132055302787571774407087805412251680621089901202910062355148546594675970548135090273568967285820747813080131723727167658968766320413774453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							731d4592e6fa86fbe3e8ad22ab701275469b1778
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jocelynfletcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jocelynfletcher.fletcherfamily.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.jocelynfletcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jocelynfletcher.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jocelynfletcher.fletcherfamily.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a43eb5f7b0000040300463044022045bb90ccc7af7210c2746b800168641c89f25ff11f876f7ab5a742e5b8fddb830220022fe201a31aba3c7cc1fbbbc555cb46ecacc9c352c7404997dc440b72be0ac3007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a43eb5f7c0000040300473045022100f9148dfc1026573d402d1d0cdbcaeab69293aa8597c94d8b563b14660670afee02207497ef6a9d68a5ae512073653ba75160910e1b907a32293a02e8e7cc8eb81fc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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