www.jackfung.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c5:3b:0e:ad:ff:73:d4:be:ff:3c:c4:63:e5:aa:41:99:9d was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jackfung.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c5:3b:0e:ad:ff:73:d4:be:ff:3c:c4:63:e5:aa:41:99:9d
Serial Number (int): 328450984751708837609482152847282333129117
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:95:01:1d:d4:41:72:1d:91:34:fe:db:6b:94:e0:0c:25:2a:35:23
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:74:6a:80:d3:99:90:c6:03:2e:6b:86:c7:ba:26:75:a5:21:79:4f
Fingerprint (sha256): ba:f2:90:2f:91:fb:68:42:c7:ee:cf:3f:e5:81:82:50:fe:e2:c4:cc:4b:ad:7a:62:83:0f:a4:df:3c:a8:a8:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jackfung.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jackfung.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jackfung.com
photo.jackfung.com
www.jackfung.com

Other certificates including the domain name jackfung.com

(limited to 100 certificates)
jackfung.com
jackfung.com
www.jackfung.com
photo.jackfung.com
jackfung.com
photo.jackfung.com
photo.jackfung.com
photo.jackfung.com
www.jackfung.com
photo.jackfung.com
jackfung.com
photo.jackfung.com
photo.jackfung.com
jackfung.com
www.jackfung.com
jackfung.com
photo.jackfung.com
photo.jackfung.com
jackfung.com
www.jackfung.com
photo.jackfung.com
jackfung.com
jackfung.com
photo.jackfung.com
photo.jackfung.com
jackfung.com
www.jackfung.com
photo.jackfung.com

Certificate

The complete raw certificate details for www.jackfung.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HOizluIn/QBws/UTzY0
dosJa/9e3HobV4V6VQyGiG5Vjd4u92YVoLpqn2BXw53Erzizkmwmjr8GZXtDBOxL
Nyj7llgbvVX2pSVOYKZvRecWN1fsaq99lprJMwtIeLprwiTiF3YZO1xXAmnZbzF6
P3sdKru6tXs5x1hEFQ6P8Lnj8ZuVMMEYlE6N1JE2fulX+2wCMYpjPHC5NuQfc420
7j737BOF3vR7/sEHqcjCMm74VXuu78mk4C0XCsEniZFipwJh2pCXI2uIib7MPq+x
ZFI1IyP4Vk2fVKd7C+KYIbRJ7iKJlesdFJiW7S0Ro6EJjPIWYV/1vaEWWWLZA/ha
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328450984751708837609482152847282333129117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 18:19:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 18:19:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jackfung.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27829449310280508696092993464771144244271009788868399298017987827001583086450961881274077456210182948373849338173424461268984370921173570126848711017546131424842671777580393452032313418065755497660190534297999734456965955201913851169628361809314409534684574549951949163476206873925885728318797454654751052076628357080882291885048511347473136363421441858185103300940388499163420905438831037048355040151937102720759223053064863624431998762693157379402935904989086126047244206963789348800245538223924176476858667289052252103060276894534724624655442734760105750499287165072775858321012593556386717203123847080325087255273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3395011dd441721d9134fedb6b94e00c252a3523
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackfung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photo.jackfung.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackfung.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170737de0e60000040300473045022100d4829b30fa0191934fb9667591696eb8b0ad2e4d5eb35c02cdbcc452deedf0c702200dbef4ac12f2072679003dcbf69776cf796926869eea40d688886e58004386d4007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170737de0b90000040300473045022100c46e323e681ae8ee8d55b62c97a39849746fac6bca847bb9cbc1b71b44185f5802207ad7b8e3e4e2ba3db53d4d3124ab6497642c9b534db304bec58a4582117c9096
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075e9136ae98b85ce6ff9d3d71672914f7a17e4a0e96c7f4e30def26ccfb1de3ab1384afff8da7b649e7c47f9c658fb55ca26434800ffd9402b770a52ad03643fe2432c5d4567c2785906f89c7bca39cadf02572a5a43109153ae540e74ed8b9acbf90419be29ae0e168f094fefccc7cdf68a7fc3c5b2d9d5ee03f7b07063724126dc3f18cec873e88e72efdd2372c5db9de551bb73f8cfeabcf13f911610a96e730c6d8e926fa84294c1ccfe34026ccfad8b71947a6163679839565c4c3242569335d39f5495995ff653bfc65da15fe8519e0236cff3265be0ad3a43519f7c1f7b11ff9620c0c4bbfb08289732ec2efffcb726e6ede751337fa818825b90e1e6