www.jaylah.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d0:5b:c1:86:31:dd:b1:94:05:f0:bf:64:e2:2b:b2:99:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jaylah.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:5b:c1:86:31:dd:b1:94:05:f0:bf:64:e2:2b:b2:99:c0
Serial Number (int): 332237554697539742625003368962538503051712
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:7a:bd:af:ed:27:cd:dd:27:ab:15:73:d7:ec:15:97:52:47:cc:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:50:b1:63:04:1e:3b:14:2a:68:95:1a:e0:7f:11:32:64:de:87:f5
Fingerprint (sha256): 7f:42:e5:f3:10:37:e8:a5:09:5e:02:1a:80:fa:6a:a9:79:81:ea:de:2d:9f:81:17:75:c4:90:03:ec:04:9f:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jaylah.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jaylah.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jaylah.org

Other certificates including the domain name jaylah.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jaylah.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332237554697539742625003368962538503051712
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 10:24:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 10:24:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jaylah.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1029641413067441975530475705482267604918884251700494381738340792985859456850638574784743599384106532489754768980445699695467901794753224483267483044687694210467835225431397873441978798519057410503230589056401364738716745697537572582937621590013116742112411181550016277534272305068440632047009269612521838687327814821463222601512790092167668487109559183591661108004209048110425554555801388595813366895789818364957296592677742543057360867425460763459327803704781655712885071364616366941933019567129688640022481565482626558187374659756740967092129373396018716746782312469773935362505312663010025522778807203770280557294805591427584737546718261029970017088656470904326081891164733850536210391590899697265225273741076773594759971270709132201943200857848849202962314186236012042569825604567478218734834512171192032330219248453751688341751480296405076280146656471898806752837721260907361824105741403412224460636508726201601670629768134726277227169523495318222233157696683806266367615671768027550906034155479083459005662404190222342030175485652250614842844743073916910728489344456745562024578980707709283827365565896692430819804668812615953070113811194293726068465446471215137254018129733768060018430949700193238238164305262627826412139547733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d87abdafed27cddd27ab1573d7ec15975247cc5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaylah.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016dfd82fc230000040300483046022100d0ee6ad01dfef37555e389c4131fadd6e04f8a43dd2dd541124b5eeb5442aa2d022100ca0e31f5ed0939553471d89c389b213aea0c9e48221a8839146660409e1981b5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dfd82fc29000004030047304502204bb88780d0e9555e4d9e9ebc317acf8918ac7c433a453ab281d4d74c44e3b1e202210091bbdceead9e9a5d275c18035117242d09bcffacdd8f1ec4351b81211ea458d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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