janissa.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:0d:d2:43:9d:29:f4:18:56:24:a7:35:3b:af:18:4d:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=janissa.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:0d:d2:43:9d:29:f4:18:56:24:a7:35:3b:af:18:4d:b0
Serial Number (int): 293682054370428639126671964351064767483312
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:44:d7:2b:9d:d2:0f:40:a2:b5:3b:06:51:9c:ca:18:5b:e9:7e:c1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fe:71:77:1b:a8:52:15:f8:ce:1e:44:60:32:77:13:64:54:08:9d:98
Fingerprint (sha256): b5:1d:41:ac:d9:11:1e:25:f8:e6:0c:3a:4a:0e:46:f5:be:35:a7:20:05:4b:49:df:5b:98:19:46:96:f8:0d:6a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate janissa.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for janissa.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

janissa.org

Other certificates including the domain name janissa.org

(limited to 100 certificates)
www.janissa.org
castelnuovorangone.org
janissa.org
www.janissa.org
janissa.org
www.janissa.org
janissa.org
janissa.org
www.janissa.org
www.janissa.org
www.janissa.org
janissa.org
janissa.org
janissa.org
janissa.org
janissa.org

Certificate

The complete raw certificate details for janissa.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISA18N0kOdKfQYViSnNTuvGE2wMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MjUyMTQ1MDRaFw0x
OTA5MjMyMTQ1MDRaMBYxFDASBgNVBAMTC2phbmlzc2Eub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAxQjwKWCc1VOmwqWNv9Fs3HOy1RRzSKm6qIe4
j+RY5gEVUVpl7saWVZKlLWorbMCRuQqWhJAE/byNJN+DM8QGMPpk9vi05uhggK4b
MrX5wGgyN+ji+sxM1ABdyLNllNirZoxtIOS6THsqe2mIsWmmkkZ+1kZHPsx2tFv6
ZKVG8wzjHWkWvXMeYFYuPvLYTi/BTfk5zKIO97qw+AN3VDYlVsreJBdEUcL9U906
6E3Wo9mMcqbF1iP6N4t6Bn00hzpnPcQIfCTOfAty3nLQbo2IH5KD6K/izPOcBVM0
2MvYkKJoXWdSW719pi7bgx2mtcdrlZik70+z5wjaVHAqMXjsMGz3hSjkVReZhR9h
Fasgl+0AVKKLowubZ7suRoDczH7UQ2+bzFKPWJTM6kRArklmmOyRCK9bWiyJbML0
gp7hqVzBYMYxuaGu3EIZL9KLwd5ZFt1iB4fR5tZA4ew+Sm61gtwaIKLUUtyH+ah4
7oqNgBfVC2kfHa4V4pPE569IgvROvYpVZNlO/ZIKCwlWPV99byv9OCbYdCBQtyk3
kjexu1JkKWGJGZuO7G37lcMpfvy7dv9AUC8orebXzJrwOUQGa0a5M2jB0GYgHnBz
NZXb9vZ6oyIOxteHxmQM+tOOC8HTgZOdcV6MNvRXE28dbwRuHC02+hWc9zu8zfhs
XSXXbBMCAwEAAaOCAmAwggJcMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUB0TXK53S
D0CitTsGUZzKGFvpfsEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggtqYW5pc3NhLm9yZzBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2
AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABa5DQZF4AAAQDAEcw
RQIgM8+k3PJ3PSUdJd3fz7hWL38wqVqVJp7qMkPz7Ujr9qcCIQC1uKCXLqsu8ZP7
8E7TNYhCyMpdaXDCCu93q6o3GpvvBgB2AGPy283oO8wszwtyhCdXazOkjWF3j711
pjixx2hUS9iNAAABa5DQZHsAAAQDAEcwRQIhAP3arDjy/FvGTT44XbVoIBOyaJp+
iOnTOPsRkcKhXK5ZAiAGWlrTFMGjVkR6/xyFGtMHnmxCSw4glrruS42oiju0pTAN
BgkqhkiG9w0BAQsFAAOCAQEAiOPFeyFLVDb1USwsi4zr4r7U0YzkjAQ/qgEcfKZw
e0t6guHCj1fMNUwKo+yuTqyQKoXVdr/9ieTVvRf0RVPKEeR36SlYU2H4pEUw5qUW
rcXOg6oXjb5Kh3CsC72/28lMS82mJ8VAsWAoMzkvw7QxaX/KvHEKnHYY8Ncci7B5
sG40abTc8VuAD9cZ7juQoAY58Ga6t9pHVM2x0p4rT9pISFzYHfRjNwev4y653qwf
lQBGaiPp7uPrYP1ziMSDW56mgFwIrSd/SKIX6DI90azKD54fIYM0W6FMhVpk5r4S
oC65rKmPNu/K5695lst76flP0Cl2RWGjfWikro2KLomBOw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293682054370428639126671964351064767483312
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 21:45:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 21:45:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'janissa.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803832320441443025798449293229924418413726092179433739708810419978065732557538146085888063508841921065225010242605912315359212421451439439602868859378503947327481778847032190866330623741250488623039319839231285503323156079952921017535569105589278778231025251708274897425568835953365207832375438799994504189825838716715780440125378885797422353762485405127099680749820902703899201352496304889510173481955127675922316219857682899221061418473358726200285836738603473714274820198821677145412777202958065216932580732817234780271763805123369563473130236828206827386691164319695818816459367613432761179984268034330390163812157559752235330652947339199186837680699745737461759938533305738921945067082840267194395858753813889674213029596346166849536220879890278560864158548283839756744057994528496124069774008115650955644089919550009318364093811155769743677096022848154722201716241529902292365577372514824620906067458500547426546747656569704552888741426218031680503299480836931231615891506407620289159895163604554035718071966307244315201362175711592847156812421803047882980904985590968589906435951732152302197405721987810074279247399985105725738036438840648688207340534830116069741623258675166906494718035445073495604479246215063181134730325011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0744d72b9dd20f40a2b53b06519cca185be97ec1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'janissa.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b90d0645e0000040300473045022033cfa4dcf2773d251d25dddfcfb8562f7f30a95a95269eea3243f3ed48ebf6a7022100b5b8a0972eab2ef193fbf04ed3358842c8ca5d6970c20aef77abaa371a9bef0600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b90d0647b0000040300473045022100fddaac38f2fc5bc64d3e385db5682013b2689a7e88e9d338fb1191c2a15cae590220065a5ad314c1a356447aff1c851ad3079e6c424b0e2096baee4b8da88a3bb4a5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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