tjl.co

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:23:d7:54:0d:63:1d:35:cf:8e:42:c1:8f:6e:1f:f7:1f:03 was issued on by Let's Encrypt .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

tjl.co

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:23:d7:54:0d:63:1d:35:cf:8e:42:c1:8f:6e:1f:f7:1f:03
Serial Number (int): 99308389217546919760928379253774343413507
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: cd:3f:f4:70:00:43:e2:97:33:6c:13:54:d3:b3:32:2f:26:6a:7f:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a3:f9:60:e3:c3:20:9f:38:a7:57:75:82:47:5e:13:16:20:8e:4b:a2
Fingerprint (sha256): ca:49:78:b0:9f:47:82:22:b7:36:9e:e5:6e:db:c6:9f:0d:33:e5:23:af:f4:c5:be:b0:da:86:cf:0e:63:8f:be

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on tjl.co
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

tjl.co
www.tjl.co

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIF/DCCBOSgAwIBAgISASPXVA1jHTXPjkLBj24f9x8DMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMTgwOTM4MDBaFw0x NjAzMTcwOTM4MDBaMBExDzANBgNVBAMTBnRqbC5jbzCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBALsqKFBnyUAEULdRel/vOiT6CiShjBaVpIApZjRHqdcM zH6SC4VUGYB63amHkU8d4xpSjQXEXyLt/Tq9au8k7GVhP9kp9DB/vmWhp2F7MbpB nsFqsY400VULnNK+CQuAMVm6GbWe5M6Z7tGVU/TWQgZ1D6VoWlK8A4GdSIKetm+P VYOorG27a677ZGB07Xvbq6ZTPiJvSqsaef8dbtBuM+mF9ClHFerCsVaJ0JwoI+t+ b8nr4ASHSPOfHGwbYaQBoQ4ajs5txpLnaTtRw/EJ79wmLRHMTE0IrnUMplsr+Hz/ jp1gQ7j28+WCSIXpAh9+jd2KXJUBMOdmMfFsDbXjHdZYDxlXBTIoqq0bOs1xNGjH npvCJXxq0rv948mNb3h+vq/aFmbHyMoDQHJ7omV2JpSOqpCKVL2ieSM0T+nrXcN+ d+nEFh9RfYldHhZmitd7bUfRPCZ0GSOavVWyXS0t/UAe3xA3g3O/WknGpT+stvdv fgQEPGvtoCAF6rB4kK2xwNoWBwyIUN0ZvTy7mS2CBUWD3GvcxoXQibtQ/EqepqtS jJBv59R/g7rohiea/BNAGsjkj8wn6JHe7kWOyD5hgw/x1Dtjg6ioyHu6miCvLKxT GrnGTzQYaqiBrUpUCswXbwlfAONoJQk6L/0UP4kbhpdg32l4q/ilOyOAvLg+TUVH AgMBAAGjggITMIICDzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFM0/9HAAQ+KXM2wT VNOzMi8man/QMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMHAGCCsG AQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50LXgxLmxldHNl bmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14MS5sZXRz ZW5jcnlwdC5vcmcvMB0GA1UdEQQWMBSCBnRqbC5jb4IKd3d3LnRqbC5jbzCB/gYD VR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyB m1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVs eWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2Vy dGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3Jn L3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQBeuvjALv9G7nrY9mLAa2gC F79/OA6rKIQDcuMz6LaDXl0FnPKWbYKAkvOthAM3+avGpWQFnupjGBHYEbmoeMOC ZnS8Mpo4BS73zj10yvCfDAy9SP5yz4NFr7WGxyUgDn0z4wtgroQpqkPAZNApfX66 OgyV7LSd7VAwP+dfQXMtLahI5YtHU6/72042dv+7TD+PTlOtbXmhjoAwRAx0dqvO sVilVKp1b2p86+shbdEYXfDWcmV4KsNcv0svc4rsMc2C9VNwCesQ+6K/Jyltntvp 5lUUgJoLe8Eigh23/GDRu849etxFSlAgaiQOSCbPt/7dY7mbQqhdXNT+CM6/NT0u -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuyooUGfJQARQt1F6X+86 JPoKJKGMFpWkgClmNEep1wzMfpILhVQZgHrdqYeRTx3jGlKNBcRfIu39Or1q7yTs ZWE/2Sn0MH++ZaGnYXsxukGewWqxjjTRVQuc0r4JC4AxWboZtZ7kzpnu0ZVT9NZC BnUPpWhaUrwDgZ1Igp62b49Vg6isbbtrrvtkYHTte9urplM+Im9Kqxp5/x1u0G4z 6YX0KUcV6sKxVonQnCgj635vyevgBIdI858cbBthpAGhDhqOzm3GkudpO1HD8Qnv 3CYtEcxMTQiudQymWyv4fP+OnWBDuPbz5YJIhekCH36N3YpclQEw52Yx8WwNteMd 1lgPGVcFMiiqrRs6zXE0aMeem8IlfGrSu/3jyY1veH6+r9oWZsfIygNAcnuiZXYm lI6qkIpUvaJ5IzRP6etdw3536cQWH1F9iV0eFmaK13ttR9E8JnQZI5q9VbJdLS39 QB7fEDeDc79aScalP6y2929+BAQ8a+2gIAXqsHiQrbHA2hYHDIhQ3Rm9PLuZLYIF RYPca9zGhdCJu1D8Sp6mq1KMkG/n1H+DuuiGJ5r8E0AayOSPzCfokd7uRY7IPmGD D/HUO2ODqKjIe7qaIK8srFMaucZPNBhqqIGtSlQKzBdvCV8A42glCTov/RQ/iRuG l2DfaXir+KU7I4C8uD5NRUcCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 99308389217546919760928379253774343413507 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-18 09:38:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-17 09:38:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tjl.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 763565266893646430977281339713191439243288204581057726411049752316326705379693663782707772339166021337637066152399168575818365507360764902472686074515490083641839857538963491686063568809423051507211756454510992359782562309257665508232946295427136560037432258307044527407900724689364196358865388543206630035144447901180568637410084231106429838331256794886879157392284925619108105738256932524555959196749393452009271873203843514052363564274476698845915021805081609434236800820047160865036860609530908843584982288538526491380266438435353342756498134398760048561813527346074596047345074750402738474099205769677945785231474858732623455010366714036010335622748952199210755434300514436690947807001977591825211360578545184085823455099056492378095948245778336492428613337361408656086672117521660039350777475143296917405354726243843516243780707296322860819895494724042828309927875642180256232772252342759221005429845646778994381474637772843135122449684124729314145180105302813139780580537792517843213728137187395279165586999349465292352875983991566835130121052419600851433348997553278301647976016553922415688006545496623973423128138487828189914598350718211089417249691560321080671999572891452802316236882707285279153246869923797681331728368967 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cd3ff4700043e297336c1354d3b3322f266a7fd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tjl.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tjl.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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