ujf.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:b9:58:a7:08:9c:c0:df:3c:61:db:94:c6:b0:b1:f0:51:c1 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ujf.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:b9:58:a7:08:9c:c0:df:3c:61:db:94:c6:b0:b1:f0:51:c1Serial Number (int): 324406935027537364772554718505520340160961
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 2a:fd:1d:77:32:2e:bf:79:73:55:d6:2d:a9:02:50:e9:73:3c:77:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 0a:91:ab:a2:53:6a:75:fa:9b:6a:39:63:85:5f:a0:55:32:57:1b:10
Fingerprint (sha256): dc:df:36:f2:a4:8a:72:99:88:0e:d0:6c:ec:77:73:ac:f9:38:00:58:fc:56:2d:41:5a:15:4c:df:ad:cc:b5:f0
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ujf.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ujf.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ujf.org
Other certificates including the domain name ujf.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for ujf.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgISA7lYpwicwN88YduUxrCx8FHBMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MDkxNTE0MjNaFw0x OTEyMDgxNTE0MjNaMBIxEDAOBgNVBAMTB3VqZi5vcmcwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQC1+hc6dfqgYe8OsdkrdbZnpho7IvwyuGMUhqFExYdh NHWRa3Rhc6sjuecyO+ZtiqezFEzxlFszI8YXUKqnC9lyDZDXKXghJ8pu4JKI3W0D nOvbhlkVlc+vfDtIffz7hQHmvK82IWJw/X0qRMv22KdZ86CEGEv0pDGAlygz77Ew /0SDGB05FYxEjcFi7oMDCWcJxs2zWNpS+9wx9miMEe50EwGYGXIUhzXMBzdWidnp t7jhl9RlE9tIGGDGqBz3RRtWZCF9/Zw6hqNRyy/e9h9KhKEGO9b539XEHDq/poxF aPItsVRuXUFcqMZcuwjklB+WxzN4n4QAQ+107tA1aKMqjIvI+tS/CP0qAVa1Ppik 3mDiiMQ92ZCo6JkjkhoDUz6i5ion8mc1lLdDoIqHmpthawiwCKFWEUs8jkv+HGri 0sbBjGwL6AhJsHlHWqt8AuQBnkxIhz+HaN7sjx2LdO5o0frQf8eLihMwZr0wWtdH DQ3jQmlSsF76K6lHRE1x8bueRz4GyS65FRNctml6rfP0Dyp0Og1QWPlYEteHv/R9 da4h/Y+84+XMMS8tvwe8ER+RDZsm3TBhrwGs1laJUjreTehlnLui5FW1Ajyza84O oLP8tJn/kTrBQFmgomq58sfYjL8EDcLNtm7fA5GDDYkoWHLTq88zByRIqc4yrNjo JQIDAQABo4ICXDCCAlgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQq/R13Mi6/eXNV 1i2pAlDpczx3VDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMBIGA1UdEQQLMAmCB3VqZi5vcmcwTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBvU3asMfAx GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW0WzgajAAAEAwBHMEUCIEnzAJ3A Gt3A/rlajvaUz8N73H54669R5nhdbD+PfBubAiEA0zapG6+NWWF4vriYdllBtTMO /WqkyeJu75+2+17S9d4AdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvY jQAAAW0WzgUZAAAEAwBHMEUCIQCkv5QombViDz5v2fEVzojbfLeJEkViHonjfyea 8INZLAIgGQcragMOfclFPrenuMBkH2kyPGjJtupSAscPVCRvzlUwDQYJKoZIhvcN AQELBQADggEBAE4s/S/wdThx7P+Y0E85YgK2EwCEa8JkMG7f4GOqWUsrakBe9yMS 4KnoWXEcylr9YgycMPD83gDug2mSk0ilp72IG7UToV3frohP6E5CSdRKVxfnhq1I wMPTcTz15gyRVuhCyLqRpGOcrxdzkndAgunMc+fkszdBGI+MSy9CIufT7S1wzooD CVZIh4IFXX/JBdSQyQzAZVWTy7RftqS8DF3j+cFQXQqsXrHVsOasW1jYqWO+LaYx 7EmQiKgqUqpBqRfAMmXAjY3xLG3YSsoAPCiJtYzmjhhexolcohaPg+/oTiRjahr6 OQTgDq0UYoZX8qU5ErfFFqtONTmn6+UrogA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtfoXOnX6oGHvDrHZK3W2 Z6YaOyL8MrhjFIahRMWHYTR1kWt0YXOrI7nnMjvmbYqnsxRM8ZRbMyPGF1CqpwvZ cg2Q1yl4ISfKbuCSiN1tA5zr24ZZFZXPr3w7SH38+4UB5ryvNiFicP19KkTL9tin WfOghBhL9KQxgJcoM++xMP9EgxgdORWMRI3BYu6DAwlnCcbNs1jaUvvcMfZojBHu dBMBmBlyFIc1zAc3VonZ6be44ZfUZRPbSBhgxqgc90UbVmQhff2cOoajUcsv3vYf SoShBjvW+d/VxBw6v6aMRWjyLbFUbl1BXKjGXLsI5JQflsczeJ+EAEPtdO7QNWij KoyLyPrUvwj9KgFWtT6YpN5g4ojEPdmQqOiZI5IaA1M+ouYqJ/JnNZS3Q6CKh5qb YWsIsAihVhFLPI5L/hxq4tLGwYxsC+gISbB5R1qrfALkAZ5MSIc/h2je7I8di3Tu aNH60H/Hi4oTMGa9MFrXRw0N40JpUrBe+iupR0RNcfG7nkc+BskuuRUTXLZpeq3z 9A8qdDoNUFj5WBLXh7/0fXWuIf2PvOPlzDEvLb8HvBEfkQ2bJt0wYa8BrNZWiVI6 3k3oZZy7ouRVtQI8s2vODqCz/LSZ/5E6wUBZoKJqufLH2Iy/BA3CzbZu3wORgw2J KFhy06vPMwckSKnOMqzY6CUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324406935027537364772554718505520340160961 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 15:14:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 15:14:23 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ujf.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742401049697346346825122144187663923636971377403194917013544801320742208192611082752134489007437038890017675242821181099535097089071152250645080412548538262890581786053536143938933349210511254318027653316653388441065752858042866921226767671432519747413795510802225646628417939783232933475871963259611979783545997953562737944952342605009870528867644378379547553635775569266623427195280070702354748001374432662572060150917983951182762681988147033729768958230342603669209442060692268257198265647938117849261605739474553556838713206996388972422903838338023444764895503568053433093535657741953366690958340241493159499574582177290322239097438416939594659773414229782141248471558226942123600566549370820248815524319985162559445657780380478801550680970904330881304579325159322052745570956696935001183789317303215323753971022952833510359405068996974136454990338727395485094879668235659605539450591917530347799580693908158056418697679629607945713647739662175183381423647787094976847838589274845648657356248880345141104674858353587744597300220337738947066684132911405856782181485112126627965293749931909096998880076166150785970941756674090319360447427740716203346944005520457273006561275162315945747190208034444854303381866112294758819368069157 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2afd1d77322ebf797355d62da90250e9733c7754 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujf.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d16ce06a30000040300473045022049f3009dc01addc0feb95a8ef694cfc37bdc7e78ebaf51e6785d6c3f8f7c1b9b022100d336a91baf8d596178beb898765941b5330efd6aa4c9e26eef9fb6fb5ed2f5de00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d16ce05190000040300473045022100a4bf942899b5620f3e6fd9f115ce88db7cb7891245621e89e37f279af083592c022019072b6a030e7dc9453eb7a7b8c0641f69323c68c9b6ea5202c70f54246fce55 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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