ujf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e0:4c:c7:2c:16:24:bd:da:e3:de:56:fb:18:73:e8:92:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ujf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e0:4c:c7:2c:16:24:bd:da:e3:de:56:fb:18:73:e8:92:e3
Serial Number (int): 424774449406266117556330392087444268290787
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b0:06:46:92:02:ee:f2:63:bd:95:97:a9:e6:95:22:10:41:ae:ab:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:d8:60:cf:9b:b0:ff:61:ac:9a:b0:2a:9a:65:11:b3:74:7a:0c:b3
Fingerprint (sha256): e0:7e:dc:7a:ed:44:32:4c:d5:93:e8:03:82:da:8f:1c:da:54:08:55:18:0c:e8:73:12:d5:b7:96:62:93:ad:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ujf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ujf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ujf.org

Other certificates including the domain name ujf.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ujf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 424774449406266117556330392087444268290787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 12:22:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-30 12:22:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ujf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766749785514449118922045970935286597070825769493318332648292889404191393462246109545680066351980042667210330610543413525467154101663101286236891603141098637464847320998392723186269511577768392546821529977442684233054214695759890437268982247977812978718608894041885064877878155440232376119771729417885278426922905058819600357034592421127875218679702280316908365008046410303799701098700683049891830927355277314739886503048446241968962079357911666486220135819944737076128549697409491032346831561587947561305320634663847187053782945262273024280764345322793525399228071992381336819751609401316399321710727467468466391164074159715616973770206429883730169712922257455391199686262655952830062024467493313504893971527094984314553271990174419568339562218969745653190646430033106429541764668988296220919766343450971879561767968271411560082968954148554462583511767099155004797282516976273147511905130863177866282878378891212457052424174975829845432538251155164393295696156920471390311191236606247775885235052848832850380588631487119824293168852783448403560073009294242106542460894469984724291619881657116585958093419546761700178843865380253844604318476377674122053366889358492492754397131718778086562707730557525733015904665318528096638182162449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b006469202eef263bd9597a9e695221041aeabea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001689eed3a83000004030047304502205b0b93d6de8c0f2b164cb75a567e5f35d419125542ee80daa39362c84ae67534022100dbf4ca856a9169f11ddd2a725aa32ac3a81f9c6303ecaeef13ae80878f101fd500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001689eed3a50000004030047304502202774a5ff1b985730deb7c01dfbd63dc608c81d2ee9a153603dc5ef3bc611567f022100bbe7d7dc89165f6ff161bb0caab04783004addc9cbb7710c86e03f8b9075feb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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