jaquan.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:8f:1a:1a:05:bd:87:85:2f:41:02:ff:e0:98:86:7e:ff was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jaquan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:8f:1a:1a:05:bd:87:85:2f:41:02:ff:e0:98:86:7e:ff
Serial Number (int): 339792017318009598420094503103982823964415
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:80:8c:4d:fb:39:33:f0:51:55:7a:f4:24:75:06:68:bc:f4:47:b7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 85:df:aa:ff:70:55:5b:e8:a4:cd:63:75:ea:0c:58:fa:69:09:5f:25
Fingerprint (sha256): c3:76:4e:98:d6:4a:b0:b7:6e:ec:ab:87:f4:fb:2d:35:2c:3f:44:f3:06:df:f0:65:17:e4:ee:32:ce:fd:80:23

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jaquan.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jaquan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jaquan.org

Other certificates including the domain name jaquan.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for jaquan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA+aPGhoFvYeFL0EC/+CYhn7/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MTcxNTI1MzFaFw0x
OTA5MTUxNTI1MzFaMBUxEzARBgNVBAMTCmphcXVhbi5vcmcwggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQD/S4qARXr7aT8jyUk2NqHCSC1fEzWm6avdYYPj
pcyQB/1NZu3UK/1MPbge3wQGBAujY/oEAdMdItexSRh141wUinv5Et+LVUNSG/KR
+oKSEpNdT7FW3K8QMMCPLUzAVJMkFPfEM6JlYlZTDMI5kUToNYPq+NHG+WLBFW70
KDR0g+AXU5YcuG1ZDLXQVYNvLybbKUVatZi57P0ZV0sSPd09vKElv6TLUMzZWH7P
VLQDvgcAMfMze4xhgREXZbh6m19cEWUDfQbmXYoPqFM74G3QdYLwqLuoze0Wyl18
Cq5EkTicM8sU2ys4vsR/bLcBvYKditSdBUITYmAvM+BaPQh+a1QMUVItG3fd3dvf
x9mJDOOZD2uYSsFBEh6Q+uyltjMafYdBBpEyvAEBNjlEf7Dpb0uJ3RwG7rIl6TSB
wMhCimAwxXazDZE2BTnRStOhZ79hdBrzqqZA8iaq/HerwrHcLdL4GDfRxBqSuOiJ
Wwe7AgZW5cHjnIBlWtOqE7bE1SJvjo7qc4FpbwNtIv5y3DdzY9so0hx0EzwSDTuY
sn7D6AeXWH11M6WCUmVXaBJ3qTJwQQmVDaRMmtFgw08TpJLraNVNM4twZZVEo+JC
ZAokXPoVQsCqA5OqvdobUnBP6AgA343UYQ+9b/xr+COm2yHgAS9lbaaruTkMSeOW
IWsViwIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBS+gIxN+zkz
8FFVevQkdQZovPRHtzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCmphcXVhbi5vcmcwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwB0
ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWtmQgVYAAAEAwBIMEYC
IQCKAhykp/2fgjMKghgrYevuYbhkl7kzLod2U4rwawje/AIhAMI+S4stdmqmvPZN
X+4UkDQsulQBVF2/zZ6rc/jcASaWAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctyk
wwz05UVH9HgAAAFrZkIFegAABAMARzBFAiEA40O72VVL7FuNVVCF8aahvAHwxewj
iv483zge7KQ7A8YCIEZYYdeeuDpKNHxkphZnPAMtNXOSp2tr2JQuKn3nQi2tMA0G
CSqGSIb3DQEBCwUAA4IBAQAPulwzBBm2QyLnlLDP/OkOdCHxuDb/JsjKirJe5Tls
pNBg9oHwgHdWJvpp2fENMu8e5P6EsNn3Wo0BHzhGicgK9h9ycU2nDTeu9966IS+K
w4pw7d/sxV8yCbeeS4McbePixCOlNTc74ZaMSPbmSnmIr8zTb9lOcNkV3wpJRxjg
12gzl0R1lXHx+3B0r6glbWepLuRo60s5U45xJ8Xx/Sam//dRdJDoTGkXy36AhJ2t
9+B3ixFTgW/hFCEWQlehsIqnuhSf1dye5uC+dBnMfx7Os0bquafHAumSdgpFBZco
2mLI8LsGunDm6UhH/t5+TpoXE1fUEmZOUwj1OOVO2JMc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339792017318009598420094503103982823964415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 15:25:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 15:25:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jaquan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1041513067318499564219123938344228606308513143872736619021788251740739267963998089811964828837098439223789403058042738687169801211087152401346344967778077085770887366332374319334258167634205300487473798175848238616229529757841695505127345083453073281524154551373444605236628301412259748791203473142835155924786096610839088481929059241308124180655538495496675793862014749931137818398985492757285202829777630941068967892969947010211513311177494360480859741716771716619146001819025917941488008848370884201088464704618739519282320834042479434959823377181516831228024491504915852653659982165390786252885526210032415862936315202010006065759961083943790437765830011340185054249564349871211837875680429151205698407643759038135716940885761266421861391830582912512162266126342490045350929596947085935907934124085386764505939632319899396568346291578631278154792429241278867405632063800099652924847519503554809997968916891890700259709781765912890916870619065939793803211801672062350237897956273127684031401147926672843424230382846468323911122236376379788032942135427582735905159950357761768742390488783730296597679409213957995117539134817868168404507875795642408284574777543093464702546760823592944652429199343043075376074893170969083896406939019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be808c4dfb3933f051557af424750668bcf447b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaquan.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b6642055800000403004830460221008a021ca4a7fd9f82330a82182b61ebee61b86497b9332e8776538af06b08defc022100c23e4b8b2d766aa6bcf64d5fee1490342cba5401545dbfcd9eab73f8dc012696007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b6642057a0000040300473045022100e343bbd9554bec5b8d555085f1a6a1bc01f0c5ec238afe3cdf381eeca43b03c60220465861d79eb83a4a347c64a616673c032d357392a76b6bd8942e2a7de7422dad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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