www.banjunkmail.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:20:39:98:e0:9c:30:67:c6:a0:a5:9a:a4:cb:e2:57:d9:25 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.banjunkmail.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:20:39:98:e0:9c:30:67:c6:a0:a5:9a:a4:cb:e2:57:d9:25
Serial Number (int): 272302453317267333577276971773515053652261
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7e:e8:52:fc:d2:9c:5a:81:d9:c2:a2:fb:5f:38:8f:9e:29:3e:6a:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7e:3f:86:66:d9:5f:b5:24:5a:e5:6b:7e:82:85:b2:9f:f8:28:73:bd
Fingerprint (sha256): f6:51:c8:7a:4d:67:1b:d8:f6:ec:f4:a3:a8:6d:45:79:97:70:b5:27:97:7b:50:e2:2f:fc:5e:e0:61:87:d3:e8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.banjunkmail.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.banjunkmail.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

banjunkmail.com
banjunkmail.org
newinternational.bible
portaransasburgerfestival.org
stopharmfuladvertising.com
stopharmfuladvertising.org
stoptvlicensing.com
stoptvlicensing.org
www.banjunkmail.com
www.banjunkmail.org
www.newinternational.bible
www.portaransasburgerfestival.org
www.stopharmfuladvertising.com
www.stopharmfuladvertising.org
www.stoptvlicensing.com
www.stoptvlicensing.org

Other certificates including the domain name banjunkmail.org

(limited to 100 certificates)
www.stopharmfuladvertising.com
banjunkmail.org
vklad.com
www.vinbar.com
www.stemcellssanjose.com
nasallavage.com
canadaolympics.com
shinseki.com
www.banjunkmail.org
banjunkmail.org
www.banjunkmail.org

Certificate

The complete raw certificate details for www.banjunkmail.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRUjzQNl14L9fxmSWbcg
7ifTChGKELv6bYcw6h8l6+3VrZtdxC7yNEL6hP3rfsDKVmoOBdiNrbygaqRidr0F
qIr4EwD4xCu3Ns/Vu/ES6PAoGAQplZpdBr2UgbOcM9pc62MZT68fqIaJs0SMXQaG
qrZZtiCdPZWXLiHGG/Zouzk9ooCITB1fiNrK9nQLYh5CAXCDcWUWukG0kRfeI5hj
fHQFDCFoptOb0tWQpZDr1rM+fRfh1skvi9/6ITA8H51ixvD0UNrFsFzyggj77PS0
60AS/9jfTLgheP3Vkvm+zf6hEdKl+Ang64B6DI5g5wsWgKV6PwHJKox55TqysBZV
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272302453317267333577276971773515053652261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 19:59:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 19:59:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.banjunkmail.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19324885106889244910200428754558622145649085357821971665105674588061200610792297330670691612946723680721549139186220866667745346373582873877007228969176165622815503875903731060048060306659762257751489465270440167032249022639130855269311352992628810272400669555622507319975419878775261307380206515369874383966217286880660555373605508582407505627089415472227492681826373012789716504625398809733947607016467495172305292837957227744792331505717844134109123373269254784536494179228211264085604913877861078761577658579493342167977674411100034479600722373055034060938184363583491136511061469290630277087988870284453036316001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ee852fcd29c5a81d9c2a2fb5f388f9e293e6a52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (410 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banjunkmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banjunkmail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newinternational.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaransasburgerfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopharmfuladvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stopharmfuladvertising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoptvlicensing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoptvlicensing.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banjunkmail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.banjunkmail.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newinternational.bible'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaransasburgerfestival.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopharmfuladvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stopharmfuladvertising.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoptvlicensing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stoptvlicensing.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e19510244000004030047304502205279c1ff13b233b4710db3b2baa7d1289d57d2bba87f302dd3bc85951bbb73080221009731b185e66d36a8645e8dac81033e29f49c848abe4e2eeaf566bbe04c9098da007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e1951024a000004030046304402206ec5801ddb7cf9b72d06f10d62619be53b488e0b90d32476f255110c52a979b3022011e7d97b5284224a5ea6dc88cc0b420bdddc8634c88a1ca367b8e922f38f3ccb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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