www.domainjail.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9a:10:c2:cb:ea:df:8b:52:68:2f:8d:d7:8d:bb:3d:53:f9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.domainjail.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:10:c2:cb:ea:df:8b:52:68:2f:8d:d7:8d:bb:3d:53:f9
Serial Number (int): 313762621390566100880419760934176782373881
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:fa:2c:07:86:28:ce:27:38:a8:4a:b4:b6:de:67:e2:b9:ff:bc:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:92:61:dc:2b:55:3f:5c:93:ab:6d:e9:00:ea:09:26:34:f1:69:e7
Fingerprint (sha256): 6d:18:02:22:6b:45:a9:66:86:ef:1e:ad:c7:e9:e4:9f:1d:1a:d9:b4:fa:8f:fa:72:93:a3:b7:93:d5:96:75:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.domainjail.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.domainjail.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.domainjail.com

Other certificates including the domain name domainjail.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.domainjail.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313762621390566100880419760934176782373881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 10:56:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 10:56:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.domainjail.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719750067346609966318153298216663084076729585434539207663653781065393971790103177820355274136972577500094750063692102591756821507655099225734273351571093069365723811649415180954036516146595094030952079091825144421373826095731462580272930991665842166379978367529506769849109600104054279111950721741337278173204998520449652369847640806873966222271800176962063819770173933222298425761145851903824286028041601098363461780062056971790900834708172743138909982766509869894104562923431285826650538124461934644297239047411952928343659292811467165631665834619341217559948163156211355899792591527250365765178519317062697505118795487227622135271404923721855049539872492189784281916756729519030744551414873374782528590412266258722289855237145717530374478647038289950645151956493751449698168556151433577546684500369479846996088783210166399577186405660088429907801849840983082591766901579054330258401932761832894507811870391997145927727258774018170842891097521880067390520921588208194842881752930515726571696072057591760587085291571297206432459079401904304069642133864845199078163171167052000264247106849980989862896499694198989751000967748432526881658876201977927547972608126501144245221676261366296512873704006538930099155802923958630812514351311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dfa2c078628ce2738a84ab4b6de67e2b9ffbca2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domainjail.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170530211910000040300483046022100ecd66617df008bcf778f1eb0f3feedf6889e69e9145ffe3f4b7378bfceec1c4a0221008abd352459e8e4394550a26ca3e12417ff16214c215ef3e072b30181411689f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001705302118e0000040300473045022074c0e51545c86eabbb77492e45da783b9997a4632109c9c03a54530060b403b80221008bb9d0bd0710cf2288dbfe2b1e83db76b0360cbddbac963c035f3bd61054899e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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