justnutrition.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:34:dd:8a:7e:85:66:ea:09:58:fa:e1:b2:61:6e:ee:31:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=justnutrition.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:dd:8a:7e:85:66:ea:09:58:fa:e1:b2:61:6e:ee:31:7c
Serial Number (int): 279326019365357290332385543751221170286972
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:8f:a9:fd:14:6b:9f:63:6f:1f:1e:cf:46:aa:c8:ce:29:13:98:4b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4f:d4:5e:73:e7:e8:04:a9:f1:af:ed:a5:bc:04:31:31:3d:41:d2:40
Fingerprint (sha256): 70:a1:dc:65:4c:b2:e4:8b:64:30:74:17:0f:50:8a:f7:03:60:6a:3e:e5:75:23:4c:06:38:24:e6:14:48:5c:bd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate justnutrition.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for justnutrition.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

justnutrition.org

Other certificates including the domain name justnutrition.org

(limited to 100 certificates)
www.justnutrition.org
www.justnutrition.org
justnutrition.org
mystemcells.org
justnutrition.org
justnutrition.org
www.rapidready.org
www.justnutrition.org

Certificate

The complete raw certificate details for justnutrition.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISAzTdin6FZuoJWPrhsmFu7jF8MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MDkxNjUxMjlaFw0x
OTExMDcxNjUxMjlaMBwxGjAYBgNVBAMTEWp1c3RudXRyaXRpb24ub3JnMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxjXUXK7DX48Dxmn0Iafalsr/gjM3
2gI3LisWMw6Phed9LcSGf6iqUHAvsGUcB+tbhz4eRImIOUUclQvbyTIkEtDYM8/4
L3GUr8uQ1qo2iSy2gwciVP5Md6IH/AjbR/98f2J4uxouLfmvYmlsEna+rcgAo7DJ
vVGsi7PlNoKkd0QMXfQ3CY9ctyQMKfcMSU8F2V/oKi0BmObUrKpAIgF9zQSJQlfF
dcDfirC/MJ6wKJSbZtvbX/hOGG2sJR+ehqGaXtHTtnao+6MVRUEkrBbHSolzF27g
SAK9SUPGv84Hv2jk0hBggSphG5x/x+fF8XP246lz7HcopZg9aOZzay/ZKqSoTPmX
NrgkdMtsCG23mCjzbaYSZRTVOxKSktX0VZh6UB+HcL7dPdtooXe3QkY6tOFsBKXQ
DjCRFmqGHZmhkICoUeio/Lnvu0lM3GWvQuWlotSdWfRK56/lQiySU87nGttgJczM
7jyW3h+pGGIvO7DftZ4Awz/M0u2PVQOuGHxiioC8R+HG8sLOdbkInnpaWq8RjzYD
KD+dN4Z/pVS+729s/O83fVjhtfq7oavEX8EtqjCkCwj0IPDFQv99vcvwX+K7m5cm
iSMWw1Ezn6k8tZnVWQVSarfE9evJkCaVSBuMtsIMtLGEy7QZUfL+GbEfY4Gmy6LM
jrCMPrQ+IOy/1k8CAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
CI+p/RRrn2NvHx7PRqrIzikTmEswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghFqdXN0bnV0cml0aW9u
Lm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB3AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiTAZ3d8dv+AAAB
bHeByKoAAAQDAEgwRgIhANfXfspSLbasg4fdwnTJJXju4AwUNFiEmn/YMu6CM9YA
AiEA4VvnsYqN3dfOVOix1BdPrxKlDy0Cb72KWSpNsfhM5oAAdgBj8tvN6DvMLM8L
coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWx3gcjNAAAEAwBHMEUCIBgngLUT5Xhl
VMTcitkmSZdkGda+zdLq2wD85IwvsCGzAiEA1Z/d6SSKPM6jz2Hhns+SRYyEgyVB
eTApFL0VrbPloEgwDQYJKoZIhvcNAQELBQADggEBAGkpUTAInBEGhpEecd0sVoz6
k0JllgJS2846tgr2dbpe0el2Jsipd9NvfmkNMmsBuneFmetBWrFEwaO2BIJuRfw8
Dvk9kMIFiHTmiSWISHMST1atqU8h6/eBkFxd7UFawCHhs6qufeCOruv2si/VV7Sn
lhcXilQlzzTfoKIkPxXyviA2GxBrgKIj3b1Bhr9ABX2iikfCiGaoqclePqg5iIEF
Y1Bv+SbkEAoRuK9ZQiGfp6EEzSVambUc5eZPBpVqUugy9XI9T9WIiGobWh3Do2aK
sVKx3OVzamHETktH8tbB5pNIDcnZhBsFZJSOs8jHjBJfA6nsW8jt5tx2v3tFKFo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279326019365357290332385543751221170286972
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 16:51:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-07 16:51:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'justnutrition.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 808627358906987932761578680169439429106317923587382763739873249389314382260254759473093894181092513610781251858737545897763619085338265657959908543675071492593155660199604686637963003632819601816893501729042946900722784334892210786788993592659815900534950678979558500949571985214839559388760657924130982721094101040725525905163558758937903965468427282303724664880993364334981112176430987185493020310245230893033697992433085350522729947345832460390202040438128837214612264766669171459310434034811278341984874496743286318705817929589123819334691291723535556850765749267562421443725484163760268517875371677868849660529424223811033799241875370479675033166877755970235393020083219462149833136144986238058393596171853785605148662132935357562023926277928471008563794011093296389877179406677281212295907970751141540802122616280632029742078322732314926597589109010802225858760799382043166371058274885235594350327377019582860510588992594900850508575771226062156235963550578373206512745075609000198892953875449425261607262576438517688329181076371944372587450345537301419057308863434276159298564349240897202047769159180038508622505724264890942088480914548455913494587227205324299358468949248276630567034857201820006954047853651712640528056047183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							088fa9fd146b9f636f1f1ecf46aac8ce2913984b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'justnutrition.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c7781c8aa0000040300483046022100d7d77eca522db6ac8387ddc274c92578eee00c143458849a7fd832ee8233d600022100e15be7b18a8dddd7ce54e8b1d4174faf12a50f2d026fbd8a592a4db1f84ce68000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c7781c8cd00000403004730450220182780b513e5786554c4dc8ad92649976419d6becdd2eadb00fce48c2fb021b3022100d59fdde9248a3ccea3cf61e19ecf92458c8483254179302914bd15adb3e5a048
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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