jerseyfriends.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:a7:89:8d:ce:af:51:8f:c4:d6:04:f3:8f:a5:9b:a7:3f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jerseyfriends.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:a7:89:8d:ce:af:51:8f:c4:d6:04:f3:8f:a5:9b:a7:3f
Serial Number (int): 294226660315851546725979203378562773788479
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5f:03:1b:45:54:fb:51:c4:15:18:42:a0:bc:9e:f7:c6:a7:d6:d2:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c0:d5:8c:87:8f:3f:d6:8f:51:d8:0d:b5:b4:d9:62:02:39:28:8a:24
Fingerprint (sha256): 95:83:be:16:02:4b:2b:c9:a7:fb:21:fc:dc:35:a6:05:49:31:d9:50:6b:e0:ff:69:e7:ce:25:d5:7e:8d:c6:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jerseyfriends.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jerseyfriends.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jerseyfriends.com

Other certificates including the domain name jerseyfriends.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for jerseyfriends.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294226660315851546725979203378562773788479
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 23:12:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 23:12:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jerseyfriends.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 891731834634193078197174720489965283006459112729921471788823045605470781309783860873501573197703436070810290139760828636247904001177215274587617736048013874786761348069814734091807032190468418772440573931614802364245185167058007966120082454049910679905970762551645897298166700564107339733420937758403310723309760668533275944336147912832808049054225429559669635230149026213643354961391209017499405796701069949532309138600064430209083030197779180123490200549273407395282310600928210818798880390660001509677718669647470698582858046687385048009767957304262710662979823958260546855809094218602458289197531897405967755859028993012934577230048026767591855706887703879041083201117001250167709205725493335636098118383076650102690053946389811912012320477075043856808695364519212806342606927763272924716475999863504045834968138311794281839393527062903056258943066116329337589300147754787260252495931704153677679738018733833792001933061231110364547025719242989423018444641501561908445414365433403317773462909927661028296692480411976465509642865873711398643821758053833424904100266006826624409399688484438646500463958257754101140178450946085943682457436337537298299157735402890153930981161073483544099576197579341315164612575919608916617751990691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f031b4554fb51c4151842a0bc9ef7c6a7d6d280
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jerseyfriends.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016ac84804fa0000040300483046022100eeff396cd9663159fce6114f5e80c31ee91903e07f23382c7f009cd8ce2f1dfd022100b842e6abe624901874946d5b379e49b8b574d0fe5126d88876f694831552ed0f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ac84803230000040300483046022100e3e906b68eecd309eabd86ca0df1665dc22224c940ccfdb9058bd63739e97342022100d1573f4c06b18440bfc52eab51ccf702e094ddc2bf614075afd8025304c5f6f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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