www.jactivism.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:29:c4:aa:65:f0:c9:c0:b3:1c:a5:e0:1c:ae:c4:43:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jactivism.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:29:c4:aa:65:f0:c9:c0:b3:1c:a5:e0:1c:ae:c4:43:49
Serial Number (int): 326726591738198576643013802928772131078985
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:33:dc:dd:25:ba:1a:84:90:4a:d3:db:e3:23:a5:21:68:b2:ea:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:51:de:a8:06:4f:53:f0:1d:8a:4b:61:33:7f:bb:d9:0f:91:e7:c8
Fingerprint (sha256): 86:c1:96:9d:c3:90:89:9e:15:31:55:a1:18:12:51:a7:25:bb:5c:bf:76:16:dc:b6:05:f6:d3:31:35:67:e3:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jactivism.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jactivism.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jactivism.com

Other certificates including the domain name jactivism.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jactivism.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326726591738198576643013802928772131078985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 08:28:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 08:28:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jactivism.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924757035966758295520468727533002466942836054853173453188160173376416813457918552839021601699469251331321628050159511760175638772071333356244244344752107266578867704262811846753239944859947131893441497454834279743805350213982520692587200171692516382642460187369064112199757046185525787922418242923339683383959827817176526637664607234096401601963472653932109810770624330863125210792698984273153196286473464604941572855818606156777395542738549999360267015002403555485340856959708400588805190493384898000897201879768915199461424111857790262235681365969767546264068625872248117623066458459580301121272873718784402061363999753894208900529820264071784171219942452925402457211135698466370354818550390174659904095836314935489089067750729888042036173620603791714100923778230669665216348606707241253040889237235864863918010586703448596063764710161991905441640752018382874662884390188759955228109174900404795076115081150902257449198121368191114425914841310960166940879028510002454414689035824761464852393141418378583813151370648568406698574098024791630052340866533915812009891543406334121175142373535459894780893213639418261510128417399012412049897012272501167017454457404051309413300989488120868589274353834035367607247890861522477448241995939
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc33dcdd25ba1a84904ad3dbe323a52168b2ea21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jactivism.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fb2d547ce000004030047304502201187a92a5efc3c4c0b88bd26cf983f73a26e1a4c8c4a104338aa8de7c67c951f022100aa08e733fcfe1cb64ea08a35d16b601320ba0aab5bd517b2852449e72515deb0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fb2d547c8000004030047304502203a34de45b526fc6a420e2436854638f070fda32d49458c125df240d07e0efda802210092403dcf8b48c79c5b8235d3c885403a022d982d6e7015495a77aa0df80d3a15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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