jaquan.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:e6:8f:1a:1a:05:bd:87:85:2f:41:02:ff:e0:98:86:7e:ff was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=jaquan.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:e6:8f:1a:1a:05:bd:87:85:2f:41:02:ff:e0:98:86:7e:ffSerial Number (int): 339792017318009598420094503103982823964415
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: be:80:8c:4d:fb:39:33:f0:51:55:7a:f4:24:75:06:68:bc:f4:47:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 85:df:aa:ff:70:55:5b:e8:a4:cd:63:75:ea:0c:58:fa:69:09:5f:25
Fingerprint (sha256): c3:76:4e:98:d6:4a:b0:b7:6e:ec:ab:87:f4:fb:2d:35:2c:3f:44:f3:06:df:f0:65:17:e4:ee:32:ce:fd:80:23
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate jaquan.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jaquan.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jaquan.org
Other certificates including the domain name jaquan.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for jaquan.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTTCCBTWgAwIBAgISA+aPGhoFvYeFL0EC/+CYhn7/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTcxNTI1MzFaFw0x OTA5MTUxNTI1MzFaMBUxEzARBgNVBAMTCmphcXVhbi5vcmcwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQD/S4qARXr7aT8jyUk2NqHCSC1fEzWm6avdYYPj pcyQB/1NZu3UK/1MPbge3wQGBAujY/oEAdMdItexSRh141wUinv5Et+LVUNSG/KR +oKSEpNdT7FW3K8QMMCPLUzAVJMkFPfEM6JlYlZTDMI5kUToNYPq+NHG+WLBFW70 KDR0g+AXU5YcuG1ZDLXQVYNvLybbKUVatZi57P0ZV0sSPd09vKElv6TLUMzZWH7P VLQDvgcAMfMze4xhgREXZbh6m19cEWUDfQbmXYoPqFM74G3QdYLwqLuoze0Wyl18 Cq5EkTicM8sU2ys4vsR/bLcBvYKditSdBUITYmAvM+BaPQh+a1QMUVItG3fd3dvf x9mJDOOZD2uYSsFBEh6Q+uyltjMafYdBBpEyvAEBNjlEf7Dpb0uJ3RwG7rIl6TSB wMhCimAwxXazDZE2BTnRStOhZ79hdBrzqqZA8iaq/HerwrHcLdL4GDfRxBqSuOiJ Wwe7AgZW5cHjnIBlWtOqE7bE1SJvjo7qc4FpbwNtIv5y3DdzY9so0hx0EzwSDTuY sn7D6AeXWH11M6WCUmVXaBJ3qTJwQQmVDaRMmtFgw08TpJLraNVNM4twZZVEo+JC ZAokXPoVQsCqA5OqvdobUnBP6AgA343UYQ+9b/xr+COm2yHgAS9lbaaruTkMSeOW IWsViwIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS+gIxN+zkz 8FFVevQkdQZovPRHtzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCmphcXVhbi5vcmcwTAYDVR0gBEUw QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0 ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWtmQgVYAAAEAwBIMEYC IQCKAhykp/2fgjMKghgrYevuYbhkl7kzLod2U4rwawje/AIhAMI+S4stdmqmvPZN X+4UkDQsulQBVF2/zZ6rc/jcASaWAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk wwz05UVH9HgAAAFrZkIFegAABAMARzBFAiEA40O72VVL7FuNVVCF8aahvAHwxewj iv483zge7KQ7A8YCIEZYYdeeuDpKNHxkphZnPAMtNXOSp2tr2JQuKn3nQi2tMA0G CSqGSIb3DQEBCwUAA4IBAQAPulwzBBm2QyLnlLDP/OkOdCHxuDb/JsjKirJe5Tls pNBg9oHwgHdWJvpp2fENMu8e5P6EsNn3Wo0BHzhGicgK9h9ycU2nDTeu9966IS+K w4pw7d/sxV8yCbeeS4McbePixCOlNTc74ZaMSPbmSnmIr8zTb9lOcNkV3wpJRxjg 12gzl0R1lXHx+3B0r6glbWepLuRo60s5U45xJ8Xx/Sam//dRdJDoTGkXy36AhJ2t 9+B3ixFTgW/hFCEWQlehsIqnuhSf1dye5uC+dBnMfx7Os0bquafHAumSdgpFBZco 2mLI8LsGunDm6UhH/t5+TpoXE1fUEmZOUwj1OOVO2JMc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA/0uKgEV6+2k/I8lJNjah wkgtXxM1pumr3WGD46XMkAf9TWbt1Cv9TD24Ht8EBgQLo2P6BAHTHSLXsUkYdeNc FIp7+RLfi1VDUhvykfqCkhKTXU+xVtyvEDDAjy1MwFSTJBT3xDOiZWJWUwzCOZFE 6DWD6vjRxvliwRVu9Cg0dIPgF1OWHLhtWQy10FWDby8m2ylFWrWYuez9GVdLEj3d PbyhJb+ky1DM2Vh+z1S0A74HADHzM3uMYYERF2W4eptfXBFlA30G5l2KD6hTO+Bt 0HWC8Ki7qM3tFspdfAquRJE4nDPLFNsrOL7Ef2y3Ab2CnYrUnQVCE2JgLzPgWj0I fmtUDFFSLRt33d3b38fZiQzjmQ9rmErBQRIekPrspbYzGn2HQQaRMrwBATY5RH+w 6W9Lid0cBu6yJek0gcDIQopgMMV2sw2RNgU50UrToWe/YXQa86qmQPImqvx3q8Kx 3C3S+Bg30cQakrjoiVsHuwIGVuXB45yAZVrTqhO2xNUib46O6nOBaW8DbSL+ctw3 c2PbKNIcdBM8Eg07mLJ+w+gHl1h9dTOlglJlV2gSd6kycEEJlQ2kTJrRYMNPE6SS 62jVTTOLcGWVRKPiQmQKJFz6FULAqgOTqr3aG1JwT+gIAN+N1GEPvW/8a/gjptsh 4AEvZW2mq7k5DEnjliFrFYsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 339792017318009598420094503103982823964415 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 15:25:31 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 15:25:31 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jaquan.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1041513067318499564219123938344228606308513143872736619021788251740739267963998089811964828837098439223789403058042738687169801211087152401346344967778077085770887366332374319334258167634205300487473798175848238616229529757841695505127345083453073281524154551373444605236628301412259748791203473142835155924786096610839088481929059241308124180655538495496675793862014749931137818398985492757285202829777630941068967892969947010211513311177494360480859741716771716619146001819025917941488008848370884201088464704618739519282320834042479434959823377181516831228024491504915852653659982165390786252885526210032415862936315202010006065759961083943790437765830011340185054249564349871211837875680429151205698407643759038135716940885761266421861391830582912512162266126342490045350929596947085935907934124085386764505939632319899396568346291578631278154792429241278867405632063800099652924847519503554809997968916891890700259709781765912890916870619065939793803211801672062350237897956273127684031401147926672843424230382846468323911122236376379788032942135427582735905159950357761768742390488783730296597679409213957995117539134817868168404507875795642408284574777543093464702546760823592944652429199343043075376074893170969083896406939019 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) be808c4dfb3933f051557af424750668bcf447b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaquan.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b6642055800000403004830460221008a021ca4a7fd9f82330a82182b61ebee61b86497b9332e8776538af06b08defc022100c23e4b8b2d766aa6bcf64d5fee1490342cba5401545dbfcd9eab73f8dc012696007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6642057a0000040300473045022100e343bbd9554bec5b8d555085f1a6a1bc01f0c5ec238afe3cdf381eeca43b03c60220465861d79eb83a4a347c64a616673c032d357392a76b6bd8942e2a7de7422dad . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 000fba5c330419b64322e794b0cffce90e7421f1b836ff26c8ca8ab25ee5396ca4d060f681f080775626fa69d9f10d32ef1ee4fe84b0d9f75a8d011f384689c80af61f72714da70d37aef7deba212f8ac38a70eddfecc55f3209b79e4b831c6de3e2c423a535373be1968c48f6e64a7988afccd36fd94e70d915df0a494718e0d768339744759571f1fb7074afa8256d67a92ee468eb4b39538e7127c5f1fd26a6fff7517490e84c6917cb7e80849dadf7e0778b1153816fe11421164257a1b08aa7ba149fd5dc9ee6e0be7419cc7f1eceb346eab9a7c702e992760a45059728da62c8f0bb06ba70e6e94847fede7e4e9a171357d412664e5308f538e54ed8931c