www2.jcu.edu.sg

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:13:6f:af:80:f1:cd:04:f3:d9:23:64:01:f6:24:f8:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www2.jcu.edu.sg

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:13:6f:af:80:f1:cd:04:f3:d9:23:64:01:f6:24:f8:d6
Serial Number (int): 342349896358973024193022590059762782894294
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 73:67:28:b0:8f:e7:22:53:d3:b7:ea:ae:a4:ef:fc:30:71:01:77:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d3:1a:a3:44:ec:46:52:98:77:e6:06:50:db:67:a9:32:89:4c:dd:e0
Fingerprint (sha256): a2:98:3b:d4:af:e6:57:22:9c:a3:a2:14:be:1a:85:5d:56:47:1f:9d:cb:d5:60:26:9a:52:8e:89:c3:df:f9:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www2.jcu.edu.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.jcu.edu.sg

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.jcu.edu.sg

Other certificates including the domain name jcu.edu.sg

(limited to 100 certificates)
secure.jcu.edu.sg
studygrant.jcu.edu.sg
webmail.jcu.edu.sg
afm.jcu.edu.sg
afm.jcu.edu.sg
grc.jcu.edu.sg
aquaculture.jcu.edu.sg
studygrant.jcu.edu.sg
tourism.jcu.edu.sg
earlychildhood.jcu.edu.sg
abc.jcu.edu.sg
openhouse.jcu.edu.sg
grc.jcu.edu.sg
*.jcu.edu.sg
grc.jcu.edu.sg
grc-dev.jcu.edu.sg
grc-dev.jcu.edu.sg
secure.jcu.edu.sg
portal.jcu.edu.sg
secure.jcu.edu.sg
twmtest.jcu.edu.sg
afm.jcu.edu.sg
edockets.jcu.edu.sg
grc.jcu.edu.sg
evserver1.jcu.edu.sg
careers.jcu.edu.sg
enquiry.jcu.edu.sg
psychology.jcu.edu.sg
www.jcu.edu.au
environmentalscience.jcu.edu.sg
www2.jcu.edu.sg
www.jcu.edu.sg
afm.jcu.edu.sg
secure.jcu.edu.sg
grc.jcu.edu.sg
secure.jcu.edu.sg
secure.jcu.edu.sg
secure.jcu.edu.sg
grc-dev.jcu.edu.sg
afm.jcu.edu.sg
grc.jcu.edu.sg
grc.jcu.edu.sg
afm.jcu.edu.sg
psychology.jcu.edu.sg
psychology.jcu.edu.sg
webservices.jcu.edu.sg
enquiry.jcu.edu.sg
secure.jcu.edu.sg
earlychildhood.jcu.edu.sg
www.jcu.edu.au
*.jcu.edu.sg
WEBMAIL.JCU.EDU.SG
afm.jcu.edu.sg
openhouse.jcu.edu.sg
secure.jcu.edu.sg
grc-dev.jcu.edu.sg
webservices.jcu.edu.sg
counselling.jcu.edu.sg
afm.jcu.edu.sg
grc.jcu.edu.sg
secure.jcu.edu.sg
parentsforum.jcu.edu.sg
studentweb.jcu.edu.sg
afm.jcu.edu.sg
webservices.jcu.edu.sg
www.jcu.edu.au
aquaculture.jcu.edu.sg
grc-dev.jcu.edu.sg
grc-dev.jcu.edu.sg
psychology.jcu.edu.sg
abc.jcu.edu.sg
secure.jcu.edu.sg
grc.jcu.edu.sg
secure.jcu.edu.sg
www2.jcu.edu.sg
www.jcu.edu.au
edockets.jcu.edu.sg
www.jcu.edu.au
grc.jcu.edu.sg
clinicalpsychology.jcu.edu.sg
careers.jcu.edu.sg
twmtest.jcu.edu.sg
clinicalpsychology.jcu.edu.sg
tourism.jcu.edu.sg
secure.jcu.edu.sg
grc.jcu.edu.sg
afm.jcu.edu.sg
www2.jcu.edu.sg
web.jcu.edu.sg
afm.jcu.edu.sg
twmtest.jcu.edu.sg
environmentalscience.jcu.edu.sg
webservices.jcu.edu.sg
*.jcu.edu.sg
webservices.jcu.edu.sg
grc-dev.jcu.edu.sg
jcu.edu.sg
virtualopenhouse.jcu.edu.sg
edockets.jcu.edu.sg
afm.jcu.edu.sg

Certificate

The complete raw certificate details for www2.jcu.edu.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342349896358973024193022590059762782894294
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-30 06:34:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-28 06:34:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.jcu.edu.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 895967744931996225539850031171937346079243013926873253365068712515103994996647810641562341665907686012518949010871670473194280684228685606594735049800029861800744202077935562661373759560612614362178894656138085012913573195711020039194204638168667901400118215094801106998922521197373545026891759010367238170114638313989326337099407497049951257370941158549148394265162009447882482907554449017684412713084120383119918721234072669035592968490908125626777161700783372807075623915314500276519850400040895992791368264225947659131141131217077517066787682674344485826195791254564855586931709408288550629777804435202653048254589370000595378469818720557360501968198728564548079571850099739387266977830270977724779867838215798719085159545474985645277312544817225236492502397562533098901164782498175262608447728836981184754591285972182523584591137888478899801842833882206535268325801399790988132809565189973578353744888218664660360819771714806423388292689122511268532995753780308414520692482466957609556312325917603038628507801110142860599046722645235192840540914647274721825545743398331701014731875571413464746225917283518532280453564552685515407486934336275754427564922057711591633337701736282387070426050015088429857482596673517154893071856117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							736728b08fe72253d3b7eaaea4effc307101772d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.jcu.edu.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169cd85142e0000040300463044022015576f88983f72b6d7c386c298c17156306f945ef6e65fe6bd35399f2f58c2d802206ff4f6eef2cd7af032f0ea18f8efa13ff085529d60542e1164b8cf2640e57ce800770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169cd8514300000040300483046022100fb867bb82e96ed5554b72479ed8cbdd099d3f985dcd9cced20110016f0c970fd022100c93ebd15b8147278c1ff0c5e77f602291cac66f09ea99ad945208f6452d251a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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