www.jaycob.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:af:3e:78:f9:bd:28:bf:9c:29:39:91:57:f2:58:a3:f4:d9 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.jaycob.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:af:3e:78:f9:bd:28:bf:9c:29:39:91:57:f2:58:a3:f4:d9Serial Number (int): 320969312283113385076533646098537958864089
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 26:bc:30:1e:dd:53:81:b3:fc:72:8b:79:f2:75:3e:60:5c:f3:a1:fd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e1:21:2b:59:81:31:8a:25:13:f6:50:1d:89:d8:39:0f:7e:58:fa:45
Fingerprint (sha256): 80:f0:5a:f2:ac:45:48:46:74:e1:73:77:9d:4f:88:65:92:c5:d5:bf:8c:44:a1:20:63:ac:aa:c7:7c:d9:c5:b7
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.jaycob.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.jaycob.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.jaycob.org
Other certificates including the domain name jaycob.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.jaycob.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA68+ePm9KL+cKTmRV/JYo/TZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMjMwNTQ0MDBaFw0y MDAxMjEwNTQ0MDBaMBkxFzAVBgNVBAMTDnd3dy5qYXljb2Iub3JnMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzCusMFfO4D/aGQPjBqdFNO/Kk0ujvh8C nrb1pv1zy3dJIcXsA7UyVFi6ckfmZjReldehBVi8kQ8hAIWkbsDKm9tZ54ols0Tj b0evIBhCkvZ8CjhnzsqiOg5fs2eXjU/AYDTdo+a00+Jfo01ImPrOSdJRhbzzxh0Z bPoYAb6GBKv+BT5XtyGyYnkKWL9+CiKlSSQ8EX4k7ZjyjpgHxNDqwyyCYm2/n6mO bcgXdTviyJMGaAukCrI8PBwHfcxEH0zOr6B4EIXQP1/Y1V5nrbSYyRY6JA10cPv2 PiuJnuBK9o9UQcNJ5lYwHCO4FDLOGjRtQWiVav7IeFkCnmHfmeohw16qPkp1gky4 A+QUsvB64Tlz7bGrJDpcndN3/Nxuut0hSqZl3FW8nofre1fZl/YuGbgWfvT6pB4y Rv5Ll4H2LtUfHCIxeowbI/JJffA66lkhn1hhtfUH/3LMtf0vR6RE3q8t7vYhzH75 LgCHXR+woWUc2vTDdYI6yIuuikMaNUzu0Gy1n9wmI3HqReYbOSgeeEIBpT9M2gCp H4fm0KwLEhqrGxucqJquwa+MA1N+6WJj1g84j071XjleMR5hwan3eTE+XIpH25lJ IGM9dWJiaas+ystGPVARrtc/wNFC7lI5XhPczC7HJsY9eBszgDdLghjNyzWnNtwC zemF56hrYekCAwEAAaOCAmEwggJdMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJrww Ht1TgbP8cot58nU+YFzzof0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg53d3cuamF5Y29iLm9yZzBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQIGCisGAQQB1nkCBAIEgfME gfAA7gB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbfdbnrgA AAQDAEYwRAIgNz871d+lQsgD58NOYv0AutPI2w8z/lLBVOXkTtQj6+UCIB5vWH3k U51F2j5kuiRxSHx47qMd605ETdryHHFhV1i3AHUAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFt91ueqwAABAMARjBEAiB98L/wmTlaR81qHYDvNVgZ R2QqwufYg3lNmOhPOyCvmwIgSWFNoBB7+Ru+sTWZfwL7gzEwxN3N0cbRTcKr8K9G 1LEwDQYJKoZIhvcNAQELBQADggEBAEIO6CETZbmw+Q6XpW9ajLvCpvdRTzSyjpQg Cw+ioswfmYOC3ovHPedShsdxGytSv/+c9bZ/gNi2kUhxy8DJU+fmciTF28VStcjx q8BuK7RyumVP8cOmsUHwCNLgKMnJRQRozjpp0hvV6nl4jXVfECTcJtiymdxCfMTv 8LzWKD/y4C0pCRb/+zgtdXPR3+5lbE0I+9V/I3Lg3HpQF54qtY2vVT1dpMmp5NGr ffHjbHBlk2Fueeef+r/P4UYU6WyMVc9+MYKoGCfYorfTPEI4c727dL9wvl58Uu7V 8eNar+vbY9xXXKWwNmlDAqgIk8Xi+g0Y6j63yUcW9pL16vSULyQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzCusMFfO4D/aGQPjBqdF NO/Kk0ujvh8Cnrb1pv1zy3dJIcXsA7UyVFi6ckfmZjReldehBVi8kQ8hAIWkbsDK m9tZ54ols0Tjb0evIBhCkvZ8CjhnzsqiOg5fs2eXjU/AYDTdo+a00+Jfo01ImPrO SdJRhbzzxh0ZbPoYAb6GBKv+BT5XtyGyYnkKWL9+CiKlSSQ8EX4k7ZjyjpgHxNDq wyyCYm2/n6mObcgXdTviyJMGaAukCrI8PBwHfcxEH0zOr6B4EIXQP1/Y1V5nrbSY yRY6JA10cPv2PiuJnuBK9o9UQcNJ5lYwHCO4FDLOGjRtQWiVav7IeFkCnmHfmeoh w16qPkp1gky4A+QUsvB64Tlz7bGrJDpcndN3/Nxuut0hSqZl3FW8nofre1fZl/Yu GbgWfvT6pB4yRv5Ll4H2LtUfHCIxeowbI/JJffA66lkhn1hhtfUH/3LMtf0vR6RE 3q8t7vYhzH75LgCHXR+woWUc2vTDdYI6yIuuikMaNUzu0Gy1n9wmI3HqReYbOSge eEIBpT9M2gCpH4fm0KwLEhqrGxucqJquwa+MA1N+6WJj1g84j071XjleMR5hwan3 eTE+XIpH25lJIGM9dWJiaas+ystGPVARrtc/wNFC7lI5XhPczC7HJsY9eBszgDdL ghjNyzWnNtwCzemF56hrYekCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 320969312283113385076533646098537958864089 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 05:44:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 05:44:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jaycob.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832943361419682261536033192480996156051278783812158102291861227821271538607608382049406884028160864591287118648977817607935440360052680025555932815257685842124800214112516000229093820490667028234460721860583042629454992870561681009427748225352910558395637337670843480901080536493180727860667780633024631450299438087178299668098077819483721802014823445979630803961852637736924857025883763852427800520071226730481089879229939062198964898126196852059235483491170705865419227649705835848001881398165740491540648855010865323466979265801792892514684487537691768646094030196977080563202906955794527621011090252566962477258608848540137482728011079621584547926222081579696476571133250514397293807574403224887886518221498432932487184520075323271751795101067194542736213981562724556021560316350245432551809268593090945269195095334749281120047104949526870123179192000014332687416937015499656012198673817734895429869546562096590969408881214117981215641341224117925283525587337072954007571136848430159631761365117355976984712352161614196376046132188307554759614667571856171565925125016255457749265407560039624311477683604009190640188693305399758738221625017649563496833221121372838947501004353685961212574082857312956995002816099070259464451613161 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 26bc301edd5381b3fc728b79f2753e605cf3a1fd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaycob.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df75b9eb800000403004630440220373f3bd5dfa542c803e7c34e62fd00bad3c8db0f33fe52c154e5e44ed423ebe502201e6f587de4539d45da3e64ba2471487c78eea31deb4e444ddaf21c71615758b7007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df75b9eab000004030046304402207df0bff099395a47cd6a1d80ef35581947642ac2e7d883794d98e84f3b20af9b022049614da0107bf91bbeb135997f02fb833130c4ddcdd1c6d14dc2abf0af46d4b1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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