javierjimenez.com

Issued by R3

About this certificate

This digital certificate with serial number 04:0a:2b:03:71:4a:86:ae:d8:46:1e:20:ab:25:00:be:34:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=javierjimenez.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0a:2b:03:71:4a:86:ae:d8:46:1e:20:ab:25:00:be:34:ad
Serial Number (int): 351909142074776549812574688760375382258861
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ab:e6:3c:4e:cf:f1:26:51:e6:45:53:fc:11:eb:a1:69:7e:90:87:96
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 64:c9:c4:8c:c5:1e:f9:98:2d:9c:f0:38:64:4d:47:8c:ba:5a:3e:a4
Fingerprint (sha256): d3:21:e6:9d:61:5e:b7:cc:16:f5:2f:04:15:f7:1a:85:8a:0e:19:b7:56:4d:04:c1:bb:a4:d8:fc:7b:96:90:91

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate javierjimenez.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for javierjimenez.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

javierjimenez.com

Other certificates including the domain name javierjimenez.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for javierjimenez.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxCQXCM2rNQgipejY4t49
ektoVPA0rbflP2pTiAw2eC+oMtSl40rseSjw6riDdiVGw3onDFNZAgtEbdua/WsA
M1WyaLkGcR/gkwOR+oOF0W9L0bxcPOJofKJ2oNGgq3c6XmsJ5/66EznIdwfLk0HY
/T9Wzu+vYqngNzvsx/cEk1i+K5NeYos7Ivq/qoQ2kUuahIQ8sdUZlzYEw8OKVVMO
Mr2tBTJrHQnzWbBWQQ9jJ9zTaH0HA41jLyNqAiKE2XrWdH2G2eRNu6dtZ8N6vhuP
v2ilA5D11qf5KpdrvpyBhSQJziAuOE2HidaQInG60BFPkyykE82YAAI9tROMBE4D
9Zdkr5NNE8Q5wTm+JhMV2GBYBEdUGNjmM8muKiVBFpaq3Rsv/IDusWNrEpGzYUUz
Z2QJ6qOuu7SN8Vi8gFhLwXmTcSPIkiHR6yKNZIJl7bGdEZT+vbKS6T9PWv+KmcZe
A8gg6GgZBKnGXoI9KvzFr//RnceOII5x1YdguBHF1B8TcpXusZkDGiDSDdv5Y2k4
cVl4e3xti8dNiN7QoOY6zzcK1MJQ61hF33rm5XCPm4Klc6qALxFZCPe2kLhyIJwg
rBJ8toNKHIlvhrXvBawo4WvALGImbtYuGqn2Z51JD6iDv63nD+v/WwDuXReb//nf
KEPRkxMfDUmWCEwDt78qz/MCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351909142074776549812574688760375382258861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 17:46:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 17:46:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'javierjimenez.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800185371179544445291671393181476169160952417867171281437999486056051386928851396277737672609104920551184357934431958683761796094774246182140266190054911978176461183103628075026006963385109516211087906498627868038319494333558737933714535406038849973305281954181779302541021682925175911913294558506085649471179373050346945178509486883886207783169427692883806552051446903411666301420177348036031551088083174035612598971802785192446025080269066286333642652979583325517371431524063235782549707963657672802522648604701034855204696393762418607630621895621448030805485778381077949553305320125993053646975092707015576049765455248369639798108614390716131012080027111543565219821774224865975842043003268282639140043727901810532770901786790038756508779682964153712309399039266444255457261099478941110992882816642580346568285496068005116417988734997622237353255317319516992095789811064197078655443400095897359984800213155556548492004631098901141273110664188977456128777378172079495551233721205442107775319376137121995016239602081781602272042228644200701203302920794834646411449280201869287586022805077576998569786541268358345055296789801016304353160947166213976838310467223255095717883719165451598040840956388193773719118568285625205381497802739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abe63c4ecff12651e64553fc11eba1697e908796
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'javierjimenez.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab910633a000004030047304502206ef75a730d548814816cc7389db597ef408934c3eaf7dd83611ed5bf0d95b772022100c95316f5239fc455bd96036c2f67adba48e0ab604b519925d45382019c6da3be007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018ab9106344000004030047304502206c59710cc8fd72b3b2c4b1a445a6e13419cdd6bb220394e631a94a5809f14ab0022100c076aa65809828f64150996d8ec1c56764ae71b7afb18a4de781c7d2ee55a005
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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