www.sjms.nu
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:0c:2a:de:ab:f3:0c:b9:b2:ae:2f:03:e4:b5:16:a6:75:a7 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.sjms.nu
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:0c:2a:de:ab:f3:0c:b9:b2:ae:2f:03:e4:b5:16:a6:75:a7Serial Number (int): 265477229951605986730418404063362677110183
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e2:f8:0d:35:a7:b3:01:2d:c5:33:56:0e:9d:81:81:03:12:bb:fd:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 16:41:74:fd:5a:c3:e5:c9:1c:11:ce:d2:a9:da:55:09:28:b1:e5:f4
Fingerprint (sha256): 82:17:c1:ee:d1:e1:a5:f7:ff:cc:b6:4b:2a:74:ab:40:5b:67:8f:bb:0d:74:28:d7:69:a3:5a:59:bc:b6:23:3a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.sjms.nu
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.sjms.nu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
sjms.nu
www.sjms.nu
www.sjms.nu
Other certificates including the domain name sjms.nu
(limited to 100 certificates)
sjms.ubiquitypress.com
www.sjms.nu
www.sjms.nu
press.sjms.nu
sjms.nu
www.sjms.nu
sjms.nu
press.sjms.nu
press.sjms.nu
www.sjms.nu
www.ubiquitypress.com
www.sjms.nu
www.sjms.nu
sjms.nu
sjms.nu
press.sjms.nu
www.ubiquitypress.com
press.sjms.nu
press.sjms.nu
www.sjms.nu
sjms.ubiquitypress.com
www.sjms.nu
aperio.press
www.sjms.nu
sjms.nu
www.ubiquitypress.com
press.sjms.nu
www.ubiquitypress.com
www.ubiquitypress.com
www.ubiquitypress.com
press.sjms.nu
www.ubiquitypress.com
www.ubiquitypress.com
press.sjms.nu
www.sjms.nu
www.ubiquitypress.com
aperio.press
www.ubiquitypress.com
www.ubiquitypress.com
www.ubiquitypress.com
www.sjms.nu
www.ubiquitypress.com
press.sjms.nu
www.sjms.nu
www.sjms.nu
press.sjms.nu
sjms.nu
www.sjms.nu
sjms.nu
press.sjms.nu
press.sjms.nu
www.sjms.nu
www.ubiquitypress.com
www.sjms.nu
www.sjms.nu
sjms.nu
sjms.nu
press.sjms.nu
www.ubiquitypress.com
press.sjms.nu
press.sjms.nu
www.sjms.nu
sjms.ubiquitypress.com
www.sjms.nu
aperio.press
www.sjms.nu
sjms.nu
www.ubiquitypress.com
press.sjms.nu
www.ubiquitypress.com
www.ubiquitypress.com
www.ubiquitypress.com
press.sjms.nu
www.ubiquitypress.com
www.ubiquitypress.com
press.sjms.nu
www.sjms.nu
www.ubiquitypress.com
aperio.press
www.ubiquitypress.com
www.ubiquitypress.com
www.ubiquitypress.com
www.sjms.nu
www.ubiquitypress.com
press.sjms.nu
Certificate
The complete raw certificate details for www.sjms.nu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgISAwwq3qvzDLmyri8D5LUWpnWnMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDUxMzQ2MjFaFw0y MDA2MDMxMzQ2MjFaMBYxFDASBgNVBAMTC3d3dy5zam1zLm51MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujxloC/tYv/CbFS1GTNPpC7LvmfFKeP6F+AN 6CSmZ61gSqnWmgIjEGQoWNdja3C7L94Y2QJ7heyD6GZNzJ99Ngc1griMzZ4dqVqU qtni+wr325mkWiIgbFpBLYHRpCTeKyYTgY28QxqfOndvRw9HPOSWHL76ClStb5Vj dqzstXgLJoH+g9QCCCuB1DJj8Q/YfaFjy74xDDAh6pTNyaKFYm/JZgdrHY2/AIRl k+dhb1eCxttivuoF+tSyO1JepY3ionys1kCWOBjsCHpkaA9cXgvnxRyoYtFyo6bi LxRcO7pZimevLte9tz+KZ4vsjUFZGwRaS+DS3lSBj5BmfOnzawIDAQABo4ICaDCC AmQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTi+A01p7MBLcUzVg6dgYEDErv9yTAf BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv MB8GA1UdEQQYMBaCB3NqbXMubnWCC3d3dy5zam1zLm51MEwGA1UdIARFMEMwCAYG Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu bGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA8JWkWfIA 0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwqylixQAABAMARjBEAiBbTezC KX/gLx5t5FraNRIzcI5jsMcbAt9PjRZVmAhRBQIgCyf/GOoQnF4BGiR0M1uw8Z3E awdA9bW8o1h6bqI/jRoAdgCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ XgAAAXCrKWL/AAAEAwBHMEUCIHMzWTqjiUkKH3GJfH+p16rSx5Oc9EiJZxfrT1IX PhL6AiEAhNsw/POnoUD4F8nuVszeVDWjxCtMyRHLLEcGJx5+H38wDQYJKoZIhvcN AQELBQADggEBAIqGEEVvMKunft9rKkoD326Jsi4k/rL8d5LXZqTAW/8JFXIDECXt WwZaDUmRlA0FI+uRAauXah7nS/ZtFJz0BxMjqT3xlaUbpjzXSXgyOel7FnP3b45W LlMwsy4gZ4Og/n6BGp20F+uUk6JLj0e6CobF5ogSVC5Q/eDToH1DhWKF7eGzuEK/ h7Sy1usxkiyW8p5qmExqcfro1iuT4xpMZINtfOSb4UURQSMTO7RraLLreShpCl/k CIrMXqlP0ISNWcB6dBPjwjbsIWcKROXnOrWWxY0cRSUSZ9MNFXiD8S1qOmjnJzSJ 2abvBnv7vu0ZkAMFrR9Qootk4YnDFz4hTeY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujxloC/tYv/CbFS1GTNP pC7LvmfFKeP6F+AN6CSmZ61gSqnWmgIjEGQoWNdja3C7L94Y2QJ7heyD6GZNzJ99 Ngc1griMzZ4dqVqUqtni+wr325mkWiIgbFpBLYHRpCTeKyYTgY28QxqfOndvRw9H POSWHL76ClStb5VjdqzstXgLJoH+g9QCCCuB1DJj8Q/YfaFjy74xDDAh6pTNyaKF Ym/JZgdrHY2/AIRlk+dhb1eCxttivuoF+tSyO1JepY3ionys1kCWOBjsCHpkaA9c XgvnxRyoYtFyo6biLxRcO7pZimevLte9tz+KZ4vsjUFZGwRaS+DS3lSBj5BmfOnz awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 265477229951605986730418404063362677110183 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 13:46:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-03 13:46:21 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sjms.nu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23510107582334677157502504230837186688163177181570905868794935213861551788889213152591833810670802810326464746720267164044958669023288621920074505455771136111506830556844391661471329108080734012463303455941918139930465954536014066415566290195642103487036666438252204433085460405285018731314979261457988628822931412314261285907282236937739689972646427578617047773292328675818104763135701486555653684160492371112472215904828508655844526110813753848793519988802293283411005919961133259430552552015108640689652856723408398801671808699046258587796914215423843251487060009442451698163861274903116644600368029214806475666283 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e2f80d35a7b3012dc533560e9d81810312bbfdc9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjms.nu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjms.nu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170ab2962c5000004030046304402205b4decc2297fe02f1e6de45ada351233708e63b0c71b02df4f8d16559808510502200b27ff18ea109c5e011a2474335bb0f19dc46b0740f5b5bca3587a6ea23f8d1a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ab2962ff000004030047304502207333593aa389490a1f71897c7fa9d7aad2c7939cf448896717eb4f52173e12fa02210084db30fcf3a7a140f817c9ee56ccde5435a3c42b4cc911cb2c4706271e7e1f7f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 008a8610456f30aba77edf6b2a4a03df6e89b22e24feb2fc7792d766a4c05bff091572031025ed5b065a0d4991940d0523eb9101ab976a1ee74bf66d149cf4071323a93df195a51ba63cd749783239e97b1673f76f8e562e5330b32e206783a0fe7e811a9db417eb9493a24b8f47ba0a86c5e68812542e50fde0d3a07d43856285ede1b3b842bf87b4b2d6eb31922c96f29e6a984c6a71fae8d62b93e31a4c64836d7ce49be145114123133bb46b68b2eb7928690a5fe4088acc5ea94fd0848d59c07a7413e3c236ec21670a44e5e73ab596c58d1c45251267d30d157883f12d6a3a68e7273489d9a6ef067bfbbeed19900305ad1f50a28b64e189c3173e214de6