thecodex.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ca:9d:6a:1d:4a:de:83:bd:84:9c:76:d7:b9:a8:aa:a5:76 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=thecodex.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ca:9d:6a:1d:4a:de:83:bd:84:9c:76:d7:b9:a8:aa:a5:76
Serial Number (int): 330283135686237173511638112463963577558390
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:07:0d:80:74:d0:b2:a7:ba:2e:11:79:3f:eb:bf:a6:d3:29:91:87
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:83:16:cb:ce:f0:78:7d:42:e4:7f:ce:0f:cf:1a:e7:aa:23:48:f5
Fingerprint (sha256): 97:fc:75:3f:ae:ea:51:6e:69:44:e6:27:1d:f9:00:a6:77:c0:81:0c:30:2a:bf:77:9f:9b:fb:fb:85:61:9c:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate thecodex.us

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thecodex.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conceptdev.jonathanbosley.com
inaudible-us.jonathanbosley.com
inaudible.us
incoding-us.jonathanbosley.com
leecates.com
leecates.jonathanbosley.com
mail.inaudible.us
mail.leecates.com
mail.pocket-analytics.net
mail.thecodex.us
pocket-analytics-net.jonathanbosley.com
pocket-analytics.net
thecodex-us.jonathanbosley.com
thecodex.us
www.conceptdev.jonathanbosley.com
www.inaudible-us.jonathanbosley.com
www.inaudible.us
www.incoding-us.jonathanbosley.com
www.leecates.com
www.leecates.jonathanbosley.com
www.pocket-analytics-net.jonathanbosley.com
www.pocket-analytics.net
www.thecodex-us.jonathanbosley.com
www.thecodex.us

Other certificates including the domain name thecodex.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for thecodex.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMeqQcruHNoB49HQDDYE
nU0wgnSH4u0yvaH7b0nX2Q6o2kYUAt1p4G90a4FMpeMG3/q9qLzhP3yW+d4VUkrq
NVMJHX5nS/Le0Qs8qmIljGmla9SmeSeXrs7OP7MF5ZdNqaPN27nzazQBMd/qc6D6
Bdk6Tsw8eQjBY1LhhuSkPIcArJNG+S/u2SzuLEGSPBe9MAEJ5VxJ1oXiAnW6nPVE
9fe0UMgw3KAcl0zKxoJnAsAMFuC+NnPr8/JgQOwtjeiP44l+bZy2cme3xHzJkfxi
cutsIHVGFYhdlfzse1fEtSSa9up415rBkf5/x7Q/1/ZPUNDjNnxLHil8DptDhWHW
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330283135686237173511638112463963577558390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-07 07:43:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-05 07:43:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thecodex.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23831259847468243003788355070211402265871678178821898525757041232876971037359276553199314051479792389823492402572412255010399213030786783375170684055803411803518478563162732914247906114115982826053247280205267832514537832268211580936911324996644261387402326185037037803204144978522785272502622487945914055988445836443919523131148663470092441652899195544649411532265082728109773361469838105170012822447958307082218243733266000636021557057280362050542012117725548699325523562931824181338417152706264820348865293814180572566557784027926192656697116468895004955276545539944050888947978721462390778659838710026483936646813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad070d8074d0b2a7ba2e11793febbfa6d3299187
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (649 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conceptdev.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inaudible-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inaudible.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incoding-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leecates.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.inaudible.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pocket-analytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocket-analytics-net.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pocket-analytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecodex-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thecodex.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conceptdev.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inaudible-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inaudible.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incoding-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leecates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leecates.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pocket-analytics-net.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pocket-analytics.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecodex-us.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thecodex.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016473e8fd760000040300473045022100cafbb0ca3911ef818491a0d562c36f11367867133c0950848bd0566c8afb3e46022019576ac7fd531fe0947cd240768ec976f60271e469a787be23dc4c32941529da0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016473e900ad000004030048304602210092403e372ba90304b446b45e8a189203e36c27e437dfbdfd1e8012941298b7c60221009fa41af8dd579912d99606334dd12f1c779ce9858c8156baabe96feae926c3a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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