cjr.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a1:2c:82:ca:e6:0e:ab:05:eb:ad:90:78:24:6c:b0:b1:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cjr.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a1:2c:82:ca:e6:0e:ab:05:eb:ad:90:78:24:6c:b0:b1:bb
Serial Number (int): 403293769946991981890428586398164370633147
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 17:49:00:0d:01:7b:04:fe:92:75:09:6b:13:b0:cc:ef:78:3d:12:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:92:ae:cb:43:c8:27:05:57:26:78:07:a9:41:b1:f8:0e:95:23:07
Fingerprint (sha256): 7e:f4:a7:ac:c6:e6:5d:2f:18:b8:b2:a1:ab:5a:1a:2c:11:4b:a1:b1:7a:9a:ac:a6:31:9b:32:05:e9:63:85:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cjr.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cjr.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cjr.org

Other certificates including the domain name cjr.org

(limited to 100 certificates)
archives2.cjr.org
cjr.org
delta2017.cjr.org
beta.cjr.org
members.cjr.org
archives.cjr.org
sni.cloudflaressl.com
beta.cjr.org
beta.cjr.org
www.kinseyzaire.com
tow.cjr.org
archives2.cjr.org
existential.cjr.org
cjr.org
bathingpanda.com
cjr.org
cjr.org
sni.cloudflaressl.com
archives2.cjr.org
www.cjr.org
beta.cjr.org
members.cjr.org
existential.cjr.org
danzery.com
beta.cjr.org
disinfopoll.cjr.org
www.cjr.org
cdn.cjr.org
cdn.cjr.org
archives2.cjr.org
archives.cjr.org
beta.cjr.org
archives.cjr.org
archives.cjr.org
after-the-uprising.cjr.org
cjr.org
www.cjr.org
delta2017.cjr.org
beta.cjr.org
beta.cjr.org
cjr.org
archives.cjr.org
archives2.cjr.org
analytics.actionableagile.com
www.cjr.org
delta2017.cjr.org
members.cjr.org
beta2017.cjr.org
beyondatonement.cjr.org
www.cjr.org
crow.academy
cjr.org
beta2017.cjr.org
cjr.org
cjr.org
existential.cjr.org
archives2.cjr.org
cjr.org
cdn.cjr.org
cjr.org
cjr.org
galley.cjr.org
cdn.cjr.org
cjr.org
archives.cjr.org
beta2017.cjr.org
archives.cjr.org
www.cjr.org
archives.cjr.org
www.cjr.org
beta2017.cjr.org
beta2017.cjr.org
bathingpanda.com
sni.cloudflaressl.com
archives.cjr.org
archives.cjr.org
cdn.cjr.org
galley.cjr.org
www.cjr.org
archives.cjr.org
cjr.org
archives2.cjr.org
cjr.org
beta2017.cjr.org
beta.cjr.org
beta2017.cjr.org
beta2017.cjr.org
blog.yukarium.net
archives.cjr.org
www.cjr.org
www.dental-health-care.com
fonts.cjr.org
cjr.org
members.cjr.org
cjr.org
beta.cjr.org
fonts.cjr.org
beta2017.cjr.org
www.cjr.org
disinformation.cjr.org

Certificate

The complete raw certificate details for cjr.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42TD6VU32Y4HYOcW6tc/
tg8Jp7bH2cQgqKO81Q5l89IKmpMoy3e/xvr28jQsESauz/dV5ON8+Ugc/I3x8459
uaxzPkVM8V+3QC/bmk1S1awkycQMBOOW+yZYE1Jm9gy7L9pMfbBUibD8ARK4HdSc
idv0qnl7kExcA2YCfcDygbwXjhmdKbOdvXaEmHtsoAXKaQHD4lDuQyED4OkGyrvb
ZToM0Fq/rNYc2t5Zds9/9ByfRCBPBQh3z2M5FZFaZIY8IcIhI1zdSU4kRX+47682
sUOjPn0Qg4dhxww1bF4i+n08tPXyddtnVejhD2Nc4k8Wuj0WgG6yLNFd/wSBqB0k
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 403293769946991981890428586398164370633147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-12 09:23:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 09:23:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cjr.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28705784438375212710606342765408149052820507921906519717572966338381009074257399452821899499589646470387385063413144574818277812751974946681285909938069166823571557056308960513864513325437656412508762621507707301792672343408232017658668764332357821219624198418288420587772283575701659748251567052809426153153932049106214403339344111313207071306860606946276975759947598736832441416603285646819355934248024388938136936285783987750253629548038873913534244221880118214804076009911439802119691080584787321529414811693746682966223788921605048948298028544202857237545865725929032347647031268602998857191827791084115933865073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1749000d017b04fe9275096b13b0ccef783d12df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjr.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017038ece9220000040300463044022053ab36d3ae48115f73d42d138f297a9777b1ec997fdf166948697cb7eea2ea7b0220151a6ea6520864adbe62b619200c5c025ca8e4f01969044e804711a9b5aef05e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017038ece9280000040300473045022100ede95d8b42363ff4e1062fe2111121817055d35b230bef2a9f959d8f5771435302207cac1b4cc2a458acc1c62b9d9c54bd1d20c2a333b29f0c904b1f736e4d148c7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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