jamestownsf.org
Issued by R3
About this certificate
This digital certificate with serial number 03:a8:f9:3c:a6:73:ca:13:43:eb:99:f6:f1:bb:92:00:d7:91 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=jamestownsf.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a8:f9:3c:a6:73:ca:13:43:eb:99:f6:f1:bb:92:00:d7:91Serial Number (int): 318835588122814130101366199454370556336017
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 7c:34:8e:2c:50:d5:bc:2e:4f:2c:1d:02:1d:28:2d:f4:04:fe:10:ad
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 5d:e1:be:24:af:c4:e3:84:33:65:0a:de:ae:51:38:5e:7a:a6:39:e6
Fingerprint (sha256): cf:8a:59:c0:a9:7c:21:92:14:06:97:a8:06:5b:4e:d9:d5:23:99:2a:3f:dd:8e:b1:c5:38:e3:98:e5:5c:07:2e
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate jamestownsf.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for jamestownsf.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
jamestownsf.org
Other certificates including the domain name jamestownsf.org
(limited to 100 certificates)
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
www.jamestownsf.org
jamestownsf.org
www.jamestownsf.org
jamestownsf.org
Certificate
The complete raw certificate details for jamestownsf.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISA6j5PKZzyhND65n28buSANeRMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDQwMDQxNDJaFw0yMzA4MDIwMDQxNDFaMBoxGDAWBgNVBAMT D2phbWVzdG93bnNmLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AOVfRtdI+o8jMJ8iHZFaiWZOdjjOU/AnKvLP6Pjoz2XlBile2pKW6wdDYCrr8r4l 9JdenrZNRkD7MGH75+eOP5eszUcH07oF/If2EnD+M8nU/kYfX5hMDkWc3Dxq5yv3 +vSC6uPUaVbRJzUd6gMXm0Rjr3hUXTKQZAA9l3Akk3fE4bjoFRycF4s/RykipBJx s6JW8p9AcPMs59re0k2NhE08LczojiJBLv9LWJRPofUlpc915QfWJMv+MmouXamq Q+y2Q3j/bplbTjqUUItqjqgmAvR1K0QozcAWmj2oAQMgGn983RXeRSOYgsYYxoEQ 0ijG7H2GPs1WIrsVCIY8VZMCAwEAAaOCAkkwggJFMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV HQ4EFgQUfDSOLFDVvC5PLB0CHSgt9AT+EK0wHwYDVR0jBBgwFoAUFC6zF7dYVsuu UAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8v cjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9y Zy8wGgYDVR0RBBMwEYIPamFtZXN0b3duc2Yub3JnMEwGA1UdIARFMEMwCAYGZ4EM AQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0 c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAejKMVNi3LbYg 6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGH5GwbwwAABAMARjBEAiA3p2CXRYBG kmHzYHUWIwjcBN18qUxOGUFkFVFIsxjl4QIgSqwRbsmOTnfA/OPG2JRej0IGPwxl sEuXhjuSp/Eg3qEAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAA AYfkbBvRAAAEAwBHMEUCICuYue/Gg/uvzb8u0/1kP/2YrnHKqCIsCAyT8NjiSepu AiEAmGP36PeF43YBsN4P21JkHyDjc5WB5ygsTwgFUY5t5AQwDQYJKoZIhvcNAQEL BQADggEBACg3tlYWTVknwq2i2P/Rr1fz9oXjoxl937zHjCB/4ci/slb/XHDUvO2d DLhg+UEOrwPAmgodqXARkI3HmYj8kxTzgQgaGbryGm611Whc1ftv8adv4kRZilUu a5J9BkYVfzroD29UnPrdGqYT+prTsrwFn7TymOTz2N5mKIWkk9kVxDjCTqhJ0H1P 76uH9gUKl1UosEna8J7c/5hAhu4yF2RXKViGUJFhUeaMdXp8vCHkPwOwmcXAVYk5 /DteC/xmFPwRoBOUtYPysq9qPNdjFHGB7dzJTDfVjcpwnysp1IygCG2OPHbE7xzB BsmAULDO8ar5zZ0zqAUCM12fPoPbVWA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V9G10j6jyMwnyIdkVqJ Zk52OM5T8Ccq8s/o+OjPZeUGKV7akpbrB0NgKuvyviX0l16etk1GQPswYfvn544/ l6zNRwfTugX8h/YScP4zydT+Rh9fmEwORZzcPGrnK/f69ILq49RpVtEnNR3qAxeb RGOveFRdMpBkAD2XcCSTd8ThuOgVHJwXiz9HKSKkEnGzolbyn0Bw8yzn2t7STY2E TTwtzOiOIkEu/0tYlE+h9SWlz3XlB9Yky/4yai5dqapD7LZDeP9umVtOOpRQi2qO qCYC9HUrRCjNwBaaPagBAyAaf3zdFd5FI5iCxhjGgRDSKMbsfYY+zVYiuxUIhjxV kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 318835588122814130101366199454370556336017 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:41:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 00:41:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jamestownsf.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28955554540156325479291925811349299151535682437063466196665534429634817188715907779994549647322430092910586006460533455670309042221595607151504962043972868649807587343913328181478848211980215164643048265159599887206250634676356673195520602225672975488012441914437155903735165724957250447108745718906947946189289084226081152116793976647974715501064990450439087841636114927565125553768583367688987074864801004773321348105941949915910933714823780494540053406233827291183870698186919646982780549322528815297705851258490025885512766235548548787893046738294097210157454444871019025670681491428164903551193115766602761786771 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7c348e2c50d5bc2e4f2c1d021d282df404fe10ad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamestownsf.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e46c1bc30000040300463044022037a760974580469261f36075162308dc04dd7ca94c4e194164155148b318e5e102204aac116ec98e4e77c0fce3c6d8945e8f42063f0c65b04b97863b92a7f120dea1007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000187e46c1bd1000004030047304502202b98b9efc683fbafcdbf2ed3fd643ffd98ae71caa8222c080c93f0d8e249ea6e0221009863f7e8f785e37601b0de0fdb52641f20e3739581e7282c4f0805518e6de404 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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