www.jonathan.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:8e:e8:87:8d:8a:6b:43:a8:68:41:6f:10:9d:cb:77:e9:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jonathan.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:e8:87:8d:8a:6b:43:a8:68:41:6f:10:9d:cb:77:e9:d0
Serial Number (int): 397078324555698688313753879098781951584720
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8e:8a:c7:ae:2c:c2:f9:f7:26:42:6d:ab:11:a3:ea:40:ae:2c:02:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8e:8f:37:7c:79:55:a8:a0:24:c4:8b:5f:e5:85:5b:85:37:2a:da:4a
Fingerprint (sha256): e4:d5:7c:6c:a7:bd:3e:c9:d4:18:59:fa:10:60:dd:ce:ff:d4:fa:5e:12:ac:93:fe:35:eb:a9:5c:6b:68:ee:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jonathan.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jonathan.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jonathan.org

Other certificates including the domain name jonathan.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.jonathan.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397078324555698688313753879098781951584720
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 16:57:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 16:57:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jonathan.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 787714274074968787757389268902402759977589349149391173705084789271193486740097621204051486621573582479217811684339694388686157945201559574788462288578192160346721413697243480937283105157377081888306321372973454610524749468641113991257930853539309153913902910157312023639702220945884243121973964020784560598204444890404348179559240946797580262671190512669631482722327597715147414909096333957818584789177840862409188438819118029187351937205726423581647198066754397836102411167696048928313530050819440925818170114211285153301481271506936704569142021646262602782626291893549881138691535144094899298253126706257517459057010035719711549362058224528979983717080190515688466764029378605110019528242348520587340227410008276545311071027320543907885020370717125125589335735344849226547783603327636751499673362950764434201045329947179033257602135328619268051789823295920915950240332272540607891535002400290676213314523072767780225107903472960337674637506656258054564532806522398330341745902567039712557239904818526271499700838382560700787738269635476642732160910818169278777700788776852354323116824364868746141764695445630809303364237024250419612028311376458338075979595623402059926059899476629296064335837764656957658548196307332854798866635699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e8ac7ae2cc2f9f726426dab11a3ea40ae2c0293
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonathan.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f6c8e72a90000040300483046022100e056a974da1579a0c8ad08c170b1042c4a711b8138b5ff510239c5f6b9f7455a022100958d45409a87d804f22afb3db6c75adf5b154b7184d949e4ae2d479eff0da29c00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f6c8e72b90000040300483046022100b9aea4a90dfdcb949a547c06d49f5ccc7ae2c59ea0d799d66f7493bef6b60ed4022100fe8a98d5d6a6180bf9e123a69d5a5108041ebd1ca94137992242e644fa5db9d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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