www.jaycob.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:80:95:98:e0:81:6d:44:4b:a8:1a:fc:89:7b:e2:77:15:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jaycob.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:80:95:98:e0:81:6d:44:4b:a8:1a:fc:89:7b:e2:77:15:4d
Serial Number (int): 305091849515169313634664870867225355425101
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:e9:13:fb:a9:cf:e0:9b:5e:c3:9e:2b:84:12:8a:b2:ec:83:2b:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:f8:b1:34:6f:e9:d1:74:b9:c2:b8:5f:3e:b9:f3:23:7a:73:33:1a
Fingerprint (sha256): b2:40:7c:31:fb:c7:a3:5e:66:a4:fd:56:cc:52:8c:9a:00:b6:a1:3b:af:ed:c1:da:37:4f:72:34:96:38:21:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jaycob.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jaycob.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jaycob.org

Other certificates including the domain name jaycob.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jaycob.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305091849515169313634664870867225355425101
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-18 14:40:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-16 14:40:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jaycob.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758655747877763946757304324773206396531833645323564144802277321198751234042482081460054642777312351203755497887142942486648539596567197009187292817546875233042376109088490770524280034896990494768752216137399744669927041029163000555778840902067128855301900286635717176486721323446752513538316227738733229019904515384403852792979228486078545357926357321102350492156042795768636132650000663763865514794769773705193768229151199549121571787011432337878887259403386738687491651684111292480892555328724435605718374415808493281739128204347084130877770164622646209542049066482433656379653018275345350318046267960539145119697538248643711242245017501312163866786943273647040326201360180866913509867691582950952248558391547254459168343166955740789320167065452415449253436735757504330825874849612020681041655407789852830346103012749793539886912336906231441344185735694458183321242119575736187033742389505012700539031142765621969841974636927180361835958732887411618173349184376466173627411920529344577345368426278260237226782849783391486176784873641939068837653495207911465045425596532617949093345448059805096936812079819819130163941894380681461680697063550841685012109695061815928664895841721712186781873725817739699305052900119605231389301153747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6e913fba9cfe09b5ec39e2b84128ab2ec832b0a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jaycob.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016ca562fe630000040300473045022100edacf9564287f6ad2a3d356aee6d341476ad4e784bf07a7720ecc5679de304180220679a432a88bc7aacf6f265e5d5785f626b7613e52552084913ac3fb390f54a6200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016ca562fe860000040300483046022100e9165ccb0cc19e74cbd6d6b6273e19b3a63c5edd51115444b296fcae7bcac514022100adaf640160fb4cc81ed6d7c15e5806d0c68c7a7ee3bca18c26d924ad440f82e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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