www.businessjournalism.org
Issued by R3
About this certificate
This digital certificate with serial number 03:67:c1:f8:b1:30:38:d7:9e:12:4b:f6:1c:a6:a3:8d:a8:fb was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.businessjournalism.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:67:c1:f8:b1:30:38:d7:9e:12:4b:f6:1c:a6:a3:8d:a8:fbSerial Number (int): 296643773874751850550424578391698467301627
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: e4:91:84:e6:0d:e8:cf:e9:69:13:5a:b6:e8:94:84:6b:5f:26:3b:b1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 59:40:25:4b:0c:d9:c2:e0:ca:e9:30:15:ae:d0:59:6d:a8:15:21:3b
Fingerprint (sha256): d5:0b:41:bb:97:8e:5a:4f:0b:56:00:e5:42:24:06:51:71:a5:27:97:4a:dc:ba:26:27:2c:de:09:f9:81:00:14
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate www.businessjournalism.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.businessjournalism.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
businessjournalism.org
www.businessjournalism.org
www.businessjournalism.org
Other certificates including the domain name businessjournalism.org
(limited to 100 certificates)
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
www.businessjournalism.org
businessjournalism.org
www.businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
businessjournalism.org
www.businessjournalism.org
businessjournalism.org
www.businessjournalism.org
businessjournalism.org
businessjournalism.org
Certificate
The complete raw certificate details for www.businessjournalism.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgISA2fB+LEwONeeEkv2HKajjaj7MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzAxMDYwNzQ2MDdaFw0yMzA0MDYwNzQ2MDZaMCUxIzAhBgNVBAMT Gnd3dy5idXNpbmVzc2pvdXJuYWxpc20ub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAp94oYQX+lL2cEP0gQOxqfd1CLIhUHCwzjj2b1VamV9XAQ3uJ GNiGH9hv/T6RQZVD2jpTxfvL6ohXvqQ2XUdeePfSE/IeRwj0nVGysCLNUScJICXE eGrZ7or/sSrRbHI2cg6d1Yekydw8CbsfWTuG4bqVkV6XkrJrl00DvihfJdYfg65J YEJmzqLFy1x2hEAjLPYK8ReKik7+LP/AG4erPmZQcAAY1BKcp8x6yU5uMFzYfbmF xzOyg4ZaQZejxXFqsF3/FfV50Q/6ccFuz/mrjxfw3/5psBAKKJAokz1NMNcPAn2e SqBm5xrI1zTx699KuAovMOG+01WbegUOeNI/kQIDAQABo4ICbzCCAmswDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBTkkYTmDejP6WkTWrbolIRrXyY7sTAfBgNVHSMEGDAW gBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUH MAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3Iz LmkubGVuY3Iub3JnLzA9BgNVHREENjA0ghZidXNpbmVzc2pvdXJuYWxpc20ub3Jn ghp3d3cuYnVzaW5lc3Nqb3VybmFsaXNtLm9yZzBMBgNVHSAERTBDMAgGBmeBDAEC ATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNl bmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3ALc++yTfnE26dfI5 xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAABhYZCRK8AAAQDAEgwRgIhAOIn8/OYB38q 1xVWMGTN9AUtLjWxDtNheeni0UBzO1lXAiEAlSpKbK4Pit+PjJ3fHT1JM1ZReoWr wCDgLUpnKCzsfiQAdwB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAA AYWGQkTAAAAEAwBIMEYCIQDiIElSpE49ORQLK7bXQhBqyD/Q+7LbsI9jnOp9Zdo9 jwIhAM3+VJqfRp8jvqXV21g/SaoI9/KM6TKE8ahtEURsUXigMA0GCSqGSIb3DQEB CwUAA4IBAQAThfLgP5kKrC/MyB0d/x5udoyUUGQe82A1Eat+FE7Rjd9ANH66qcAj //WMSPxIDgQm11jKHn+HGWcqvzjAv8QLPVQyfajRVB122bXw3YujW55qfX78Gsi8 9mPYnEH6Ex4PKqH8cdilNrlAgjcFTxzLxC5TXHv7jsQlhO9CTE4bjUC/RfffpQUy 7S+a+VyIBgtv3hQTGFRq8IsvBCVawO5+JQx/r0t9efD8szAeVS6jJF6Lv23IiAo6 4+wHGyldIKOAIOFqHq2gqREKwjGFPp8rctsN1joFcOLKTIwdtUysvmWaYxlArHLO 5q0N/YnYRCxPTgvbTHF1og47l9ibjQVY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94oYQX+lL2cEP0gQOxq fd1CLIhUHCwzjj2b1VamV9XAQ3uJGNiGH9hv/T6RQZVD2jpTxfvL6ohXvqQ2XUde ePfSE/IeRwj0nVGysCLNUScJICXEeGrZ7or/sSrRbHI2cg6d1Yekydw8CbsfWTuG 4bqVkV6XkrJrl00DvihfJdYfg65JYEJmzqLFy1x2hEAjLPYK8ReKik7+LP/AG4er PmZQcAAY1BKcp8x6yU5uMFzYfbmFxzOyg4ZaQZejxXFqsF3/FfV50Q/6ccFuz/mr jxfw3/5psBAKKJAokz1NMNcPAn2eSqBm5xrI1zTx699KuAovMOG+01WbegUOeNI/ kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 296643773874751850550424578391698467301627 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-06 07:46:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 07:46:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.businessjournalism.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21191346989208181704140667326881151815224313295324501441128457554691403957684334456266968139207255631153823272059886539003026200007316542338006762966582817713525152156482574196782843309868257219363166972353283730788856087584152354667439821544111540660138014270994586017947895782747518248129018792156581547985101674210333004262834003532457528516404641238339992863284108943180112300193905898834132131811241892113421742229471202862316059650428742344749633215393704331194015617041851616350057043572885707467280728549715078489143696214665707808281557899445643305093845432590242384077624367667259806363234308297916878569361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e49184e60de8cfe969135ab6e894846b5f263bb1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessjournalism.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businessjournalism.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000185864244af0000040300483046022100e227f3f398077f2ad715563064cdf4052d2e35b10ed36179e9e2d140733b5957022100952a4a6cae0f8adf8f8c9ddf1d3d493356517a85abc020e02d4a67282cec7e240077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000185864244c00000040300483046022100e2204952a44e3d39140b2bb6d742106ac83fd0fbb2dbb08f639cea7d65da3d8f022100cdfe549a9f469f23bea5d5db583f49aa08f7f28ce93284f1a86d11446c5178a0 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001385f2e03f990aac2fccc81d1dff1e6e768c9450641ef3603511ab7e144ed18ddf40347ebaa9c023fff58c48fc480e0426d758ca1e7f8719672abf38c0bfc40b3d54327da8d1541d76d9b5f0dd8ba35b9e6a7d7efc1ac8bcf663d89c41fa131e0f2aa1fc71d8a536b9408237054f1ccbc42e535c7bfb8ec42584ef424c4e1b8d40bf45f7dfa50532ed2f9af95c88060b6fde141318546af08b2f04255ac0ee7e250c7faf4b7d79f0fcb3301e552ea3245e8bbf6dc8880a3ae3ec071b295d20a38020e16a1eada0a9110ac231853e9f2b72db0dd63a0570e2ca4c8c1db54cacbe659a631940ac72cee6ad0dfd89d8442c4f4e0bdb4c7175a20e3b97d89b8d0558