www.jaycob.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:af:3e:78:f9:bd:28:bf:9c:29:39:91:57:f2:58:a3:f4:d9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jaycob.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:af:3e:78:f9:bd:28:bf:9c:29:39:91:57:f2:58:a3:f4:d9
Serial Number (int): 320969312283113385076533646098537958864089
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:bc:30:1e:dd:53:81:b3:fc:72:8b:79:f2:75:3e:60:5c:f3:a1:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:21:2b:59:81:31:8a:25:13:f6:50:1d:89:d8:39:0f:7e:58:fa:45
Fingerprint (sha256): 80:f0:5a:f2:ac:45:48:46:74:e1:73:77:9d:4f:88:65:92:c5:d5:bf:8c:44:a1:20:63:ac:aa:c7:7c:d9:c5:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jaycob.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jaycob.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jaycob.org

Other certificates including the domain name jaycob.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jaycob.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISA68+ePm9KL+cKTmRV/JYo/TZMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjMwNTQ0MDBaFw0y
MDAxMjEwNTQ0MDBaMBkxFzAVBgNVBAMTDnd3dy5qYXljb2Iub3JnMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzCusMFfO4D/aGQPjBqdFNO/Kk0ujvh8C
nrb1pv1zy3dJIcXsA7UyVFi6ckfmZjReldehBVi8kQ8hAIWkbsDKm9tZ54ols0Tj
b0evIBhCkvZ8CjhnzsqiOg5fs2eXjU/AYDTdo+a00+Jfo01ImPrOSdJRhbzzxh0Z
bPoYAb6GBKv+BT5XtyGyYnkKWL9+CiKlSSQ8EX4k7ZjyjpgHxNDqwyyCYm2/n6mO
bcgXdTviyJMGaAukCrI8PBwHfcxEH0zOr6B4EIXQP1/Y1V5nrbSYyRY6JA10cPv2
PiuJnuBK9o9UQcNJ5lYwHCO4FDLOGjRtQWiVav7IeFkCnmHfmeohw16qPkp1gky4
A+QUsvB64Tlz7bGrJDpcndN3/Nxuut0hSqZl3FW8nofre1fZl/YuGbgWfvT6pB4y
Rv5Ll4H2LtUfHCIxeowbI/JJffA66lkhn1hhtfUH/3LMtf0vR6RE3q8t7vYhzH75
LgCHXR+woWUc2vTDdYI6yIuuikMaNUzu0Gy1n9wmI3HqReYbOSgeeEIBpT9M2gCp
H4fm0KwLEhqrGxucqJquwa+MA1N+6WJj1g84j071XjleMR5hwan3eTE+XIpH25lJ
IGM9dWJiaas+ystGPVARrtc/wNFC7lI5XhPczC7HJsY9eBszgDdLghjNyzWnNtwC
zemF56hrYekCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJrww
Ht1TgbP8cot58nU+YFzzof0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg53d3cuamF5Y29iLm9yZzBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfME
gfAA7gB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbfdbnrgA
AAQDAEYwRAIgNz871d+lQsgD58NOYv0AutPI2w8z/lLBVOXkTtQj6+UCIB5vWH3k
U51F2j5kuiRxSHx47qMd605ETdryHHFhV1i3AHUAsh4FzIuizYogTodm+Su5iiUg
Z2va+nDnsklTLe+LkF4AAAFt91ueqwAABAMARjBEAiB98L/wmTlaR81qHYDvNVgZ
R2QqwufYg3lNmOhPOyCvmwIgSWFNoBB7+Ru+sTWZfwL7gzEwxN3N0cbRTcKr8K9G
1LEwDQYJKoZIhvcNAQELBQADggEBAEIO6CETZbmw+Q6XpW9ajLvCpvdRTzSyjpQg
Cw+ioswfmYOC3ovHPedShsdxGytSv/+c9bZ/gNi2kUhxy8DJU+fmciTF28VStcjx
q8BuK7RyumVP8cOmsUHwCNLgKMnJRQRozjpp0hvV6nl4jXVfECTcJtiymdxCfMTv
8LzWKD/y4C0pCRb/+zgtdXPR3+5lbE0I+9V/I3Lg3HpQF54qtY2vVT1dpMmp5NGr
ffHjbHBlk2Fueeef+r/P4UYU6WyMVc9+MYKoGCfYorfTPEI4c727dL9wvl58Uu7V
8eNar+vbY9xXXKWwNmlDAqgIk8Xi+g0Y6j63yUcW9pL16vSULyQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzCusMFfO4D/aGQPjBqdF
NO/Kk0ujvh8Cnrb1pv1zy3dJIcXsA7UyVFi6ckfmZjReldehBVi8kQ8hAIWkbsDK
m9tZ54ols0Tjb0evIBhCkvZ8CjhnzsqiOg5fs2eXjU/AYDTdo+a00+Jfo01ImPrO
SdJRhbzzxh0ZbPoYAb6GBKv+BT5XtyGyYnkKWL9+CiKlSSQ8EX4k7ZjyjpgHxNDq
wyyCYm2/n6mObcgXdTviyJMGaAukCrI8PBwHfcxEH0zOr6B4EIXQP1/Y1V5nrbSY
yRY6JA10cPv2PiuJnuBK9o9UQcNJ5lYwHCO4FDLOGjRtQWiVav7IeFkCnmHfmeoh
w16qPkp1gky4A+QUsvB64Tlz7bGrJDpcndN3/Nxuut0hSqZl3FW8nofre1fZl/Yu
GbgWfvT6pB4yRv5Ll4H2LtUfHCIxeowbI/JJffA66lkhn1hhtfUH/3LMtf0vR6RE
3q8t7vYhzH75LgCHXR+woWUc2vTDdYI6yIuuikMaNUzu0Gy1n9wmI3HqReYbOSge
eEIBpT9M2gCpH4fm0KwLEhqrGxucqJquwa+MA1N+6WJj1g84j071XjleMR5hwan3
eTE+XIpH25lJIGM9dWJiaas+ystGPVARrtc/wNFC7lI5XhPczC7HJsY9eBszgDdL
ghjNyzWnNtwCzemF56hrYekCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320969312283113385076533646098537958864089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 05:44:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 05:44:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jaycob.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832943361419682261536033192480996156051278783812158102291861227821271538607608382049406884028160864591287118648977817607935440360052680025555932815257685842124800214112516000229093820490667028234460721860583042629454992870561681009427748225352910558395637337670843480901080536493180727860667780633024631450299438087178299668098077819483721802014823445979630803961852637736924857025883763852427800520071226730481089879229939062198964898126196852059235483491170705865419227649705835848001881398165740491540648855010865323466979265801792892514684487537691768646094030196977080563202906955794527621011090252566962477258608848540137482728011079621584547926222081579696476571133250514397293807574403224887886518221498432932487184520075323271751795101067194542736213981562724556021560316350245432551809268593090945269195095334749281120047104949526870123179192000014332687416937015499656012198673817734895429869546562096590969408881214117981215641341224117925283525587337072954007571136848430159631761365117355976984712352161614196376046132188307554759614667571856171565925125016255457749265407560039624311477683604009190640188693305399758738221625017649563496833221121372838947501004353685961212574082857312956995002816099070259464451613161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							26bc301edd5381b3fc728b79f2753e605cf3a1fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaycob.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df75b9eb800000403004630440220373f3bd5dfa542c803e7c34e62fd00bad3c8db0f33fe52c154e5e44ed423ebe502201e6f587de4539d45da3e64ba2471487c78eea31deb4e444ddaf21c71615758b7007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df75b9eab000004030046304402207df0bff099395a47cd6a1d80ef35581947642ac2e7d883794d98e84f3b20af9b022049614da0107bf91bbeb135997f02fb833130c4ddcdd1c6d14dc2abf0af46d4b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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