www.jayvion.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:fc:55:05:50:77:55:98:46:f2:99:98:6f:05:05:06:b3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jayvion.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:fc:55:05:50:77:55:98:46:f2:99:98:6f:05:05:06:b3
Serial Number (int): 271200170977025024390537737073320947680947
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f3:82:e7:7a:cc:10:d3:74:7d:12:33:da:69:0a:be:1b:d0:65:ce:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): df:10:a3:54:55:92:82:dd:4d:10:2e:48:53:d0:6e:c5:47:6a:27:76
Fingerprint (sha256): bc:23:f1:59:62:28:27:99:3b:8d:e2:c7:79:39:7c:0d:b3:19:30:af:47:5c:65:20:42:e4:ab:3a:c9:f9:d0:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jayvion.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jayvion.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jayvion.org

Other certificates including the domain name jayvion.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jayvion.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271200170977025024390537737073320947680947
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 23:59:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 23:59:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jayvion.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 844580790802922895903891837420232615080383107671309621860493020476733037953280877061227652345343488329086601919273247989082592244110689176864626550309689181276784135472937319512502277975390496335064597248095801953141736817241046308276383619394870571981425622070408091843126545593751653728695663132224806793931999798850033533995478852481343166455445064034526429059917659123613617191107491191574092510041165416642079331573458170554465201386655093149210193644472931679433205084193707873632889332079173716679837106943750261666358449854124193442954573301809464019672336427109127745202295261395273451383820391184452914385008140828288163316686502057085800722268791815733232218977639699356262535276668904252315199374115854779938190884392877566282090833846899820188115340849057116267775107769790504012091110922054951913324463483004974065672475605480440650881177540126081909791042938918693507985317864264756690714369098602936577071117801024071350362719270763758195521042679866087026105530162068820677975311662625339705968844141680163971732592374028491197338338696381095838875197303041720635089821501740670189105768906073869355738136174807897280334468771863007313071502113800756706818315913611740756720563314943896312135602727489384679302843121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f382e77acc10d3747d1233da690abe1bd065ce1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jayvion.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f356a5f480000040300483046022100d817d4da0e7ca5df041225ac6aa8bd630d9f03923e682ce6c814fb57cc09f1b502210097eb26908444ef239a5ecaa08ce29a047f72c3000cd9c4e25aab5ee50adb8c2300760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f356a5f690000040300473045022025bf81abb12f2b3a8c813ac15def86e7485f40b18e119efbb08b27226a15595b0221008708047e1ca70ae87a6aeeb3b01b8c9c8952cc35fb10f6ea45e85037a73904f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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