joga.ai

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2c:7c:cf:3d:dd:5e:ef:83:ee:f0:40:5c:69:0e:2c:cb:04 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=joga.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2c:7c:cf:3d:dd:5e:ef:83:ee:f0:40:5c:69:0e:2c:cb:04
Serial Number (int): 363587468203255116142079313711172074392324
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 0b:0f:aa:bc:73:83:95:2a:fd:15:6f:d2:26:12:59:56:66:43:8e:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:9d:fb:a6:6e:4c:c7:f0:26:63:3c:d7:68:c6:61:45:a1:f9:de:b1
Fingerprint (sha256): 9b:04:f4:38:fb:60:33:c7:7c:d0:ca:ef:97:81:c9:8d:8a:5d:c6:d0:a4:66:0d:ac:1b:70:f3:d5:40:97:e7:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate joga.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for joga.ai

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

joga.ai
www.joga.ai

Other certificates including the domain name joga.ai

(limited to 100 certificates)

Certificate

The complete raw certificate details for joga.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363587468203255116142079313711172074392324
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 03:15:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 03:15:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'joga.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845372272729240887720603771147548247339720876602824804748449196223493914901907878762378476776084360131613699158657387805763178569784213323784237675937396896261726979309992455816576672283061654094356621691429220224075723473542558761050055975667487038176458751066861172840502943612896298103852353872632091395361217837876592578589433938636949183245433790424213628067585333426622357096525355530488106929728008135577887743443605406057553617428711976404718257833813780600090833250404525606890332085811369379895821059570169482518593299305952871471726071533112631955822873897363617478386895415427842469557446061673458461828767009830034556281691751825700321537976295454607954798325556144502643504138519296708089858533114073477570586782599182138441687727893943305732490339787486981567215630840164015219621675229404936054395947674470474889492114783949870657127672621536000337609092888680407421320633443390381488892426104692156166905162220457674559484971756385864863090796159442392884387242395805903585855464121202511083544720164765807745498930158704037442583201013013494582769418825934623488250489001542514596831090662376976626477949660107288583655067781542173526547834559595790066222885988224624035057488148176864620837379314951904627221897107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b0faabc7383952afd156fd22612595666438e54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joga.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.joga.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704c3542280000040300483046022100eece678ee6ccc80413529acca1c116508157c8010e7ad16622ea9de80fc18969022100fc19295f9de6e3c5cfa0aa9174ca71d004506a5f70abab911962a5c7ce0cf27200760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704c35422b000004030047304502207cc9923dbca06ac88eaeb1fb548cf3f4ed55279d1ffa2eb329cdbf4c81021673022100ff8f99960d6bf9e2c83b707736f22110e93a9b7f4db87985077195368200f412
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0023e5d370726f0bb4077fa70ebdad587fcaa947fd46c67ec5e3b3d168bb1788af998dd5f5775641d7db9ee28b4aa5143fa65bbe9575d1c43815005caf7f5df43d425c5cc44a00779845e0ff42f941fde98421c21eca56d5089b4d165fb1a2ab4143edbe559540126351d5b3c2273fe0b07d644bbe194de8e574c0fc39a34a8286453c3d18eb461362a804a00c4d8fd2a00a862384fb6d2335dd46cc7c000bdbd786fd0262206478e35d73589711b72854df501ba85152cbfefd98cc9fe3590a0a995aa5c646bbcf4cab5cba88ac68e3f7cffe5603351c534fad4ad9847b8c9167c6aa0e8f63784ed177df6a4fb0f9609e995758bebf423140507928de11f2c8a3