jonathan.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:87:02:7f:af:f8:cb:8d:1b:12:2f:f3:4b:4e:4f:ba:91:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jonathan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:87:02:7f:af:f8:cb:8d:1b:12:2f:f3:4b:4e:4f:ba:91:2c
Serial Number (int): 307278298776433297248235471742619738607916
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f4:19:33:95:9d:08:be:e7:53:69:b0:8a:3e:f3:aa:28:a2:be:b9:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7f:99:89:01:1a:41:47:59:18:28:4d:99:5e:0d:c2:77:bd:f2:a6:6b
Fingerprint (sha256): 78:8e:45:90:8f:e3:57:b1:e8:9e:aa:8f:31:04:6a:77:dd:19:72:c0:43:02:66:d9:d0:c2:9c:4a:90:2f:9f:2c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jonathan.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jonathan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jonathan.org

Other certificates including the domain name jonathan.org

(limited to 100 certificates)
delimeister.com
www.jonathan.org
bio-nmn.com
www.rosaura.com
www.informationwork.com
jonathan.org
jonathan.org
jonathan.org
jonathan.org
jonathan.org
jonathan.org
jonathan.org
jonathan.org
www.jonathan.org
www.jonathan.org
www.jonathan.org
www.jonathan.org
jonathan.org
cryptoreport.org
www.jonathan.org

Certificate

The complete raw certificate details for jonathan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307278298776433297248235471742619738607916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 21:40:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 21:40:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jonathan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829897360978828912115261153826485793959041692937756919717152686928728123785013491385264384699142336103497625011346768794963237350049950492661921316287638012160816205823428280727790139367975298020500121710405332173365240191300411599154565429879857434675583400625175299330214277452085087347418576473227511093005338497676539155979698366161621721324732155844649169887367942168972890927808583925002302818713240111561677168084870245124042061277513739498795041808491160272849722569070934843162807297667411412243424318395650801862938724592939736113783701213030948050727574018336411599265774362606315140289332522992483525406914556443784896931783952601215793905755524149969151481767760022624363294670569855370686497705301425249402486408634534816113835023867690010653897545260370881487386998075654926506623281267098699252036011383608323786706168458210866950539089237928302714011799355598606645497624828703612576350411547612998137419814999298844432537022221770330927968322819284120612590637545462881673000119428466008460394507644239365229550906894385803356228301867443673308539556582164249535012513889768036851774676886507602257933348181401759500363456144346632970059038116881037195053552652060302910873175023057165881176990295258848643206791659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f41933959d08bee75369b08a3ef3aa28a2beb9dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonathan.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e42e00e740000040300483046022100b0ef4a1d3f2eeaba80ab452aa92d4f4489b275b73131beaaf930701b0bd10c820221009c4dfeb9007aeed5b13529fb6efca5a659afe5b1ae75af2cf2bed9fd4042e684007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e42e00e64000004030046304402200bd612ec2486a672ade189d1e83b8b44972d7d66df82ac2dc9cdf9099d8c27d402204ba59450744c75e39a32db83cbb864aacda1a1ea1f91eea4b0823c767a33158f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006a4e2e490fac41fe3f8baea99c8bb052f863e15ea6588e2455c2abfb9e8f2fe14666cc76006a16a555e9ad4701e60dd285d413eaea7f844dbd60f8a44238f3facbfb7e72bc9d6bd0d0959d61125c9ecbb910a12968ed6a73f9eeb68cb244b1de9d3bf7e6b0c2c70984fdc602b414dfe10ed77e212979185438d8a165cabaadfb835d2d500dc6a527959503b308fdba4c6ad4f95f3918887dc01f2410d7191132af21a124b31f3bd6e15eb3a51a32cc7422b171056bfe528ec05eed00dcfa3e8e3d8fa83ca9bffd88624e72889c523ffee09925292e4dfb4158953bb6a9efbc614c22a644c65bf93d675640a1516906f6d13c6c76d08a585f7d1646c4124f1a6b