fujitecamerica.jonathanbosley.com

Issued by R3

About this certificate

This digital certificate with serial number 04:12:84:58:aa:6a:11:4c:95:21:52:bd:3e:ec:a5:50:f8:2f was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fujitecamerica.jonathanbosley.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:12:84:58:aa:6a:11:4c:95:21:52:bd:3e:ec:a5:50:f8:2f
Serial Number (int): 354750144805598210563963510086147796695087
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a4:87:57:30:0b:97:14:28:04:ab:44:92:8a:3f:79:cc:41:93:b9:48
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:b4:b1:cb:6b:d8:b7:bd:dd:ed:68:f1:4b:40:03:74:c3:4c:5a:16
Fingerprint (sha256): db:32:ef:cd:73:59:bb:52:14:0b:5a:93:15:9e:05:ef:d4:ed:4e:8e:bd:88:c7:0f:c0:d7:97:52:20:7d:05:2c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate fujitecamerica.jonathanbosley.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fujitecamerica.jonathanbosley.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

devfcg.jonathanbosley.com
fujitecamerica.jonathanbosley.com
www.devfcg.jonathanbosley.com
www.fujitecamerica.jonathanbosley.com

Other certificates including the domain name jonathanbosley.com

(limited to 100 certificates)
devyz.net
pocket-analytics.us
fcgcoins.com
jonathanbosley.com
corsicanabrushhog.com
devyz.net
mail.lonestaraviators.com
fcgcoins.com
cpcontacts.devyz.co
cpanel.thecodex.us
corsicanabrushhog.com
leeharveys.jonathanbosley.com
pocket-analytics.co
avidlyactive.com
spacedmanthemovie.com
cpcontacts.pocket-analytics.co
tvquotes.co
pocket-analytics.us
devyz.co
webdisk.pocket-analytics.net
bik.kr
devyz.us
spacedmanthemovie.com
fcgcoins.com
avidlyactive.com
fcgcoins.com
nuevoshorizontes-gt.com
jonathanbosley.com
tvquotes.co
corsicanabrushhog.com
whatsinthis.co
devyz.us
leecates.com
cpcalendars.leecates.com
whatsinthis.co
bik.kr
autodiscover.inaudible.us
programaddict.jonathanbosley.com
bik.kr
cpanel.tvquotes.co
www.chefdcdallas.jonathanbosley.com
bik.kr
www.thecodex.us
devyz.co
corsicanabrushhog.com
whatsinthis.co
thecodex.us
devyz.net
tvquotes.co
corsicanabrushhog.com
jonathanbosley.com
www.avidlyactive.jonathanbosley.com
jonathanbosley.com
devyz.net
devyz.us
corsicanabrushhog.com
jonathanbosley.com
mail.inaudible.us
chefdcdallas.jonathanbosley.com
corsicanabrushhog.com
cpcontacts.jonathanbosley.com
leecates.com
corsicanabrushhog.com
corsicanabrushhog.com
inaudible.us
devyz.us
webmail.chefdcdallas.com
chefdcdallas.com
thecodex.us
nuevoshorizontes-gt.com
avidlyactive.com
leeharveys.jonathanbosley.com
devyz.co
bik.kr
spacedmanthemovie.com
autodiscover.avidlyactive.com
fujitecamerica.jonathanbosley.com
tvquotes.co
chefdcdallas.com
corsicanabrushhog.com
avidlyactive.com
avidlyactive.com
chefdcdallas.com
smith.jonathanbosley.com
pocket-analytics.co
leecates.com
chefdcdallas.com

Certificate

The complete raw certificate details for fujitecamerica.jonathanbosley.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISBBKEWKpqEUyVIVK9PuylUPgvMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMTUxNTE2MjhaFw0yNDA1MTUxNTE2MjdaMCwxKjAoBgNVBAMT
IWZ1aml0ZWNhbWVyaWNhLmpvbmF0aGFuYm9zbGV5LmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMStR5M0T8Psr3jAFLCGQn4zz9DIPZldkX6hLJjy
iNixMrqD4unIjXaDo+weXzHn7M5s3D9em3ei5bh59+3uLcbsnOVYHsuglvb3R20B
eTzt9r390iOA3+Tnrz2NWCkqRN5qC9BZepoOUEQegAviukvkX+LOAYCkwfO7kdBb
hjc8yjqiTLkUAYUifDeREKY405tu9lhoAjIVIq+tAXDmL9RcquOTIen5V6dwRcnw
FO/Ph+jiZFqIHSlea+1Gd9FD8EySpdbA6ZMvVA0aMbV9QQe6KrleuMtlHMQXa1V4
0iAKcXW0V/IEjNABQwGbG1CkWDDyn9XhASAxoNAwxmt7/McCAwEAAaOCAocwggKD
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUpIdXMAuXFCgEq0SSij95zEGTuUgwHwYD
VR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEG
CCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0
dHA6Ly9yMy5pLmxlbmNyLm9yZy8wgY8GA1UdEQSBhzCBhIIZZGV2ZmNnLmpvbmF0
aGFuYm9zbGV5LmNvbYIhZnVqaXRlY2FtZXJpY2Euam9uYXRoYW5ib3NsZXkuY29t
gh13d3cuZGV2ZmNnLmpvbmF0aGFuYm9zbGV5LmNvbYIld3d3LmZ1aml0ZWNhbWVy
aWNhLmpvbmF0aGFuYm9zbGV5LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB1ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0t
cm/h+tQXAAABja2OHQIAAAQDAEYwRAIgUFVpNjoU2KX3D9xG+6wXfCFSTCnVUBrS
OHbN7dsX2TkCIHEbKoBVKzD+fZ9tidKAju9plj8tYy3XV2FuFacMe1Q7AHcASLDj
a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGNrY4fDwAABAMASDBGAiEA
9gqHkS6IJ+6zL7ZJz7Kw90sPnT6Y9gdCK0BlgVc6f70CIQC/m5lsW37kjtDenlQP
CyoHulKQdHSqHaVunHofhpabDDANBgkqhkiG9w0BAQsFAAOCAQEAbhk6wrP1o4Tg
Efgz08WqZbSNn+FaZLybhfhw3HQVyEuitAl/tUUbH5tn/dGkKN1aAWVZupom2Jqg
xmC9gbZdDjFiOfgn0j+35IWjSrTy8w67C9tGBhJliQdVu7bO9KnDWHHmBpMNGj2M
YftFDrGEBKZRC8UMdjg5+TQ3py6MJlqalRhObzbRa60tne22pLsEV36w5vgIKHSH
VESYjETpelbW4HuIWbsnyBQg7+zbfgluRkZbJPV4eNK/UeOuq5C+N48kh4cszQaN
mT8bcP/RwRwdSYTdMn2ZmXfA228LW90eeziXQEffnwQFIatAdn+10gaHqw7g8lNV
3fblR2mCWg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK1HkzRPw+yveMAUsIZC
fjPP0Mg9mV2RfqEsmPKI2LEyuoPi6ciNdoOj7B5fMefszmzcP16bd6LluHn37e4t
xuyc5Vgey6CW9vdHbQF5PO32vf3SI4Df5OevPY1YKSpE3moL0Fl6mg5QRB6AC+K6
S+Rf4s4BgKTB87uR0FuGNzzKOqJMuRQBhSJ8N5EQpjjTm272WGgCMhUir60BcOYv
1Fyq45Mh6flXp3BFyfAU78+H6OJkWogdKV5r7UZ30UPwTJKl1sDpky9UDRoxtX1B
B7oquV64y2UcxBdrVXjSIApxdbRX8gSM0AFDAZsbUKRYMPKf1eEBIDGg0DDGa3v8
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 354750144805598210563963510086147796695087
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 15:16:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-15 15:16:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fujitecamerica.jonathanbosley.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24828155123798477669722008559633994486252244687843220445673192393916756830763617614532230389465813556931539177724009914998374747576122354794816020643853730273669961667676848991033100222079787879341909778738988702166970939437443221897342631412595466215727067288812931836544144543362560321483225056193203711298916959574900432563530886662134282563504092099694157787676052631532773150250773637135775003706319256758879560978176579496715520022316305504467711028551828570832557677041765428611921245435337666062859759409225080720700269411130630209892302228413940469279847967604235511420480343878954900523386117168864476003527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a48757300b97142804ab44928a3f79cc4193b948
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfcg.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fujitecamerica.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devfcg.jonathanbosley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fujitecamerica.jonathanbosley.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dad8e1d0200000403004630440220505569363a14d8a5f70fdc46fbac177c21524c29d5501ad23876cdeddb17d9390220711b2a80552b30fe7d9f6d89d2808eef69963f2d632dd757616e15a70c7b543b00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dad8e1f0f0000040300483046022100f60a87912e8827eeb32fb649cfb2b0f74b0f9d3e98f607422b406581573a7fbd022100bf9b996c5b7ee48ed0de9e540f0b2a07ba52907474aa1da56e9c7a1f86969b0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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