www.jamesjohnson.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:30:b5:58:08:8c:e4:ce:99:99:41:02:8d:cf:15:b3:53:8b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.jamesjohnson.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:30:b5:58:08:8c:e4:ce:99:99:41:02:8d:cf:15:b3:53:8b
Serial Number (int): 277911458770268438951458165554680236823435
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:9f:32:05:10:4e:f1:48:3a:f0:f0:9d:23:7e:69:22:82:1e:bd:19
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 99:35:8c:f5:dd:63:7f:d8:b8:14:f7:d5:82:96:ec:a8:58:6b:b2:4d
Fingerprint (sha256): e9:4a:98:9a:93:42:b2:55:88:60:a5:18:a1:e8:00:05:e9:26:a9:bc:6a:cd:a2:fb:e4:c1:93:b7:5d:14:fc:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.jamesjohnson.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jamesjohnson.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jamesjohnson.io

Other certificates including the domain name jamesjohnson.io

(limited to 100 certificates)
jamesjohnson.io
dealsoftheday.xyz
media.jamesjohnson.io
giftsnap.jamesjohnson.io
sni.cloudflaressl.com
jouwaanvraagpunt.tst.yacht.nl
www.id.goship.vn
jamesjohnson.io
media.jamesjohnson.io
jamesjohnson.io
sni.cloudflaressl.com
www.jamesjohnson.io
jamesjohnson.io
sni.cloudflaressl.com
sni.cloudflaressl.com
jamesjohnson.io
jouwaanvraagpunt.tst.yacht.nl
content.tesdopi.com
sni.cloudflaressl.com
content.tesdopi.com
sni.cloudflaressl.com
dealsoftheday.xyz
jamesjohnson.io
jamesjohnson.io
sni.cloudflaressl.com
www.jamesjohnson.io
jamesjohnson.io
openvpn.jamesjohnson.io
pve.jamesjohnson.io
giftsnap.jamesjohnson.io
www.jamesjohnson.io
familyrecipebooks.com
www.id.goship.vn

Certificate

The complete raw certificate details for www.jamesjohnson.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277911458770268438951458165554680236823435
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 00:25:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 00:25:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jamesjohnson.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814242247995878426972288921342598744588988734244434911141713218124180026392666897999125438636010980560411628747726745251356917008182738903364412332123658500800117589086731573240729830431187526893764729669069481927739255637946289615134102980856424111054357488488117708870018564944651972820179526288459063340823401678636772841800812374825217049155349951691252264303379630776064641635290692413739826332608762841523489073587372394965571853001847779623293083660029271402023655577861939628668122542847559276339985660245481578556293824183348753230669710526796720274614329341722200563185054857039044176756334949665776142129593322099535652509812444434034443036216525415630614445123968648653963591951136651146720329799246938219231436539991483867154151555967008392673091766197198614122234063588656907743204012774236892659774404262362999252217730115998930906235401711073356717377994403556155453409178626862272378872087607250933203113620712365620528962875155338428929019074329292232121668395861797900467188632747742506830266283965150791393117446179893333342933313552490304508055963017923851082703377544585303735503253931925789036386581475388097826107414756456322662109967685424224807430467790160913369730682358738674488807722762141421386365010891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							059f3205104ef1483af0f09d237e6922821ebd19
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jamesjohnson.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687d75e0d20000040300483046022100961a12f485a3395ba8adc3432a0f26d24383a68ca20020a77d8d4bebf4082026022100afe26a53f528d0496ecd36b6ef7013f26d6b70f927660eeedf8a733152217774007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001687d75e0d4000004030046304402206ddf299e68a4bddc5eab1c32eba6e0ba639936496c1afc066385fc861cebb44a0220179d6bf5ebd3d04ffc5f4796c4058552ae3519ac9d797eef8f097c5fa85f224f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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