www.jaylah.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f0:14:75:0a:27:d3:75:9c:a2:06:33:13:2c:95:64:2c:31 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jaylah.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f0:14:75:0a:27:d3:75:9c:a2:06:33:13:2c:95:64:2c:31
Serial Number (int): 343031818120933555959016421216709425507377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:d8:34:5b:55:e3:1c:31:48:79:5b:ce:43:cf:cc:b6:fb:11:78:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:20:89:ab:e3:15:ed:e9:58:1c:58:1c:75:2c:8e:27:50:46:75:56
Fingerprint (sha256): 78:d6:a7:7c:45:c1:15:f1:ac:d2:f8:15:9d:49:a0:2b:f7:b5:95:63:ba:c3:d7:13:cf:ce:d8:78:b9:29:10:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jaylah.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jaylah.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jaylah.org

Other certificates including the domain name jaylah.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jaylah.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343031818120933555959016421216709425507377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 09:08:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 09:08:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jaylah.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 714754630270098313776088526980938691402927191580411441575366830709899505375755476696512242652966378554757082997243408277469109119010760308650347715945668611098723162810551345453499914653896205312358844822162092034414306476069017326288140899394234798831441537488640802749461249641988564764130628831190957940074222058657178312040700034227110492998701950312146995909218347938263299067870340970125503291210900292767407488641834304240588103328703824421713149405810526327957997437013784657238984643178749677502866607584634028993183619850582710295318132518830146078147091105895316912825174717920629953934271493549729625465165982945483842445023591839429952596115999060947526166873819596067360908198287183375514172322144356548840201510585951448290712876238957010569632664399574885297463683182175469169587312268102083497884169976323271799838023890901764005841808302682229307290266675534976333998830179387175135982443303617876412310449620715445558906836704886425812204895456111640266486712019099619368664675549179881939551603623491447724445437005515576334980437447350119634835806986138726969247379822419548523205796524926535555601890620151824752018541540737812155915137413497213514510346727621111644947740688071512197292606409301418816511374271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92d8345b55e31c3148795bce43cfccb6fb1178e9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaylah.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ca432b2540000040300483046022100ff71e121d4162c466cdf5a69b14faff88b1676d0fdb3593a00bb5da7f0a37848022100fdbf30f9d09085d65bb8e7cc4eb9c7e1b8425aa176f9425b448438e12dc4a508007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016ca432b07e0000040300473045022054ccc89c05b5bd5f56cef9222958b24f69464bf734bbd6bf16f7979faaa6d107022100d8de5f0a9f0cef985262c329552592794bb38c7c580e6ca092504319c4cfb35e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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