ujf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:58:a7:08:9c:c0:df:3c:61:db:94:c6:b0:b1:f0:51:c1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ujf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:58:a7:08:9c:c0:df:3c:61:db:94:c6:b0:b1:f0:51:c1
Serial Number (int): 324406935027537364772554718505520340160961
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:fd:1d:77:32:2e:bf:79:73:55:d6:2d:a9:02:50:e9:73:3c:77:54
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:91:ab:a2:53:6a:75:fa:9b:6a:39:63:85:5f:a0:55:32:57:1b:10
Fingerprint (sha256): dc:df:36:f2:a4:8a:72:99:88:0e:d0:6c:ec:77:73:ac:f9:38:00:58:fc:56:2d:41:5a:15:4c:df:ad:cc:b5:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ujf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ujf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ujf.org

Other certificates including the domain name ujf.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ujf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtfoXOnX6oGHvDrHZK3W2
Z6YaOyL8MrhjFIahRMWHYTR1kWt0YXOrI7nnMjvmbYqnsxRM8ZRbMyPGF1CqpwvZ
cg2Q1yl4ISfKbuCSiN1tA5zr24ZZFZXPr3w7SH38+4UB5ryvNiFicP19KkTL9tin
WfOghBhL9KQxgJcoM++xMP9EgxgdORWMRI3BYu6DAwlnCcbNs1jaUvvcMfZojBHu
dBMBmBlyFIc1zAc3VonZ6be44ZfUZRPbSBhgxqgc90UbVmQhff2cOoajUcsv3vYf
SoShBjvW+d/VxBw6v6aMRWjyLbFUbl1BXKjGXLsI5JQflsczeJ+EAEPtdO7QNWij
KoyLyPrUvwj9KgFWtT6YpN5g4ojEPdmQqOiZI5IaA1M+ouYqJ/JnNZS3Q6CKh5qb
YWsIsAihVhFLPI5L/hxq4tLGwYxsC+gISbB5R1qrfALkAZ5MSIc/h2je7I8di3Tu
aNH60H/Hi4oTMGa9MFrXRw0N40JpUrBe+iupR0RNcfG7nkc+BskuuRUTXLZpeq3z
9A8qdDoNUFj5WBLXh7/0fXWuIf2PvOPlzDEvLb8HvBEfkQ2bJt0wYa8BrNZWiVI6
3k3oZZy7ouRVtQI8s2vODqCz/LSZ/5E6wUBZoKJqufLH2Iy/BA3CzbZu3wORgw2J
KFhy06vPMwckSKnOMqzY6CUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324406935027537364772554718505520340160961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 15:14:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 15:14:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ujf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742401049697346346825122144187663923636971377403194917013544801320742208192611082752134489007437038890017675242821181099535097089071152250645080412548538262890581786053536143938933349210511254318027653316653388441065752858042866921226767671432519747413795510802225646628417939783232933475871963259611979783545997953562737944952342605009870528867644378379547553635775569266623427195280070702354748001374432662572060150917983951182762681988147033729768958230342603669209442060692268257198265647938117849261605739474553556838713206996388972422903838338023444764895503568053433093535657741953366690958340241493159499574582177290322239097438416939594659773414229782141248471558226942123600566549370820248815524319985162559445657780380478801550680970904330881304579325159322052745570956696935001183789317303215323753971022952833510359405068996974136454990338727395485094879668235659605539450591917530347799580693908158056418697679629607945713647739662175183381423647787094976847838589274845648657356248880345141104674858353587744597300220337738947066684132911405856782181485112126627965293749931909096998880076166150785970941756674090319360447427740716203346944005520457273006561275162315945747190208034444854303381866112294758819368069157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2afd1d77322ebf797355d62da90250e9733c7754
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d16ce06a30000040300473045022049f3009dc01addc0feb95a8ef694cfc37bdc7e78ebaf51e6785d6c3f8f7c1b9b022100d336a91baf8d596178beb898765941b5330efd6aa4c9e26eef9fb6fb5ed2f5de00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d16ce05190000040300473045022100a4bf942899b5620f3e6fd9f115ce88db7cb7891245621e89e37f279af083592c022019072b6a030e7dc9453eb7a7b8c0641f69323c68c9b6ea5202c70f54246fce55
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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