cannajunky.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8f:ea:7b:fd:3c:f1:67:4e:a1:09:49:cd:9b:67:05:2c:a1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cannajunky.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8f:ea:7b:fd:3c:f1:67:4e:a1:09:49:cd:9b:67:05:2c:a1
Serial Number (int): 397421205336540487212585989710449014549665
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:d2:4e:09:90:c3:bb:d3:53:71:54:50:15:49:dc:a8:54:15:f5:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:07:f4:a4:31:c5:6a:15:02:27:3b:71:8b:19:3c:dc:33:6c:66:9e
Fingerprint (sha256): d3:8b:3f:d6:f3:56:e8:b6:86:1f:3e:71:ec:89:1d:c4:93:98:74:ce:a9:f0:c0:8a:2b:bb:97:ea:5a:d7:a9:4d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cannajunky.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cannajunky.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cannajunky.com

Other certificates including the domain name cannajunky.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cannajunky.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397421205336540487212585989710449014549665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 02:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-06 02:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cannajunky.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 804064170710738224661661729490479988672593358547749225585569346217876006038986439081097832705307818948211230139254479976827243672928742310830322358378117911033168471010857521950619002640793039648975902904287494980235823540941270803971757715899699698157482870963758408692817930052209438568383754501824459287138494593775573449498840042531694201876170973068642095010303584592053346136482449358997955157363180529109349307716176812276642565090201118182248207231460416357652504013484379892798909126657507762054067349549815445595827257867276683399428580674706019730770950787419162551529937455505023819420794556749949064886067462057599395271101642070754244084200830818457484236787018555813209828011758136401246727725381545841548825601828976817454700300535241780499955326504281673347554665520061043555187248267788893280499154883444417346306871338766824359995692408006164215425640222526832804542840942135521628582092877087940203273279917890576968430333440798113128071590057285913238804851618485259481267193059707764044816083449223406882819838904290986754289676716672228666371952572896015258897107030249958008433577006798716849597238207379750812266117737377617055360637224977235815969763534364470839948975336555074726899165117908025809321900051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cad24e0990c3bbd3537154501549dca85415f536
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannajunky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168bb9ea7a60000040300473045022100863f0b945ce8654df07f482c196164c7626b7b7ff626430d7e6c8a690879452202202d42db8e2d50530f3dd84f1635a32f9961ba17bd815647a9dc783aed3e0341cf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168bb9ea9a60000040300473045022013af80fbb80612e1cb69927f431d24a6a69d764e3415c9682c595b9c9418d5c3022100bb179507f7af508d28d4430c7ff7e38a4cc5e7c4903a113448196864fd3cba81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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