jena.boston

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8d:4f:26:05:c2:11:19:52:37:04:0e:fd:97:db:b0:46:ea was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jena.boston

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8d:4f:26:05:c2:11:19:52:37:04:0e:fd:97:db:b0:46:ea
Serial Number (int): 309421877966868299368203804886100859700970
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fd:02:fc:be:bf:18:63:76:bc:17:37:46:ec:76:23:52:d9:ec:35:46
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:d6:e2:b0:e0:f2:d4:14:c9:31:4c:0a:f3:65:53:f4:ec:79:2e:95
Fingerprint (sha256): b9:63:2a:63:6c:22:6a:cb:11:4d:ad:05:1c:15:db:1a:20:9c:4e:16:a0:f6:ff:3c:84:67:ec:62:b5:e0:aa:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jena.boston

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jena.boston

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jena.boston

Other certificates including the domain name jena.boston

(limited to 100 certificates)

Certificate

The complete raw certificate details for jena.boston in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309421877966868299368203804886100859700970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 16:10:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 16:10:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jena.boston'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 847878323769489490274526288612741094559973504192546610280221813911049476041513237714539340197740298389642968406284124497749009807453234754038374280217353716952746919969711447658880220045350129886895918979943232500968260674518782030364831880697555210333377857900139548564393329698578436499819980471210054922416586845439889391256628386446939453426102738527414345876437518279093485156825367310275295606604493631844961943418345361943869564155987610227488957015173344623228729039535482123878297992320218174298812193339201172192604976467101063376191519419574832419682153865673475893519865282053554363363941065017639583683147270690773319340811973838392370795328902815203570744492938139958257148583990754235473919599433905731069174481572517135900924370533951214720022561346570647358723429522335672350892125422435350176643936672961036416903597405106492431715031619757287211213076541180015485628652114467164578788927427696974398256645503723980030161009004873392262343991403428597955036211275315626923173787117231935331729317112755886528359718150153132316829674403516557954403577537428854631639091332571549928795380846898469123857658987683499782820254292115505318198633008202785968772059030411109474654954706885515622791223691225352923343144101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd02fcbebf186376bc173746ec762352d9ec3546
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jena.boston'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170ca93cb080000040300483046022100e5b705d7a9668a4f458f28d05173af18dd2d080f7670c8ccc9da54cdd1fbb6ea022100fe8f0c53041c20fdc7b270e50a0323a6e019b9c71bfc6d1fc36dbceddf778e33007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ca93cafb00000403004730450221008940d09780a22cee66d401cb2b94bd283394cc35704e38c249f86a9f56c5f99f022078d599cc35d4a9bdbe69f88964d42fcae78f2602cf63fdbd39250b46e243003d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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