www.xnj.info

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:18:7a:bd:a2:0c:d0:8b:1f:82:78:60:2d:29:e2:7b:2c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.xnj.info

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:18:7a:bd:a2:0c:d0:8b:1f:82:78:60:2d:29:e2:7b:2c
Serial Number (int): 306626951374095478161575953741034610129708
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c3:0a:da:5c:93:7a:a4:fd:89:3f:d7:a2:31:fd:37:c6:93:74:d9:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:da:6d:a0:46:26:52:39:6b:db:0d:00:23:f4:af:f6:c1:37:1f:ec
Fingerprint (sha256): fa:67:ed:13:50:ab:1b:e1:35:63:3c:cd:28:6a:ae:de:8d:e8:0c:cc:2d:a0:0d:db:26:d1:c9:c8:23:cc:85:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.xnj.info

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.xnj.info

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.xnj.info

Other certificates including the domain name xnj.info

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.xnj.info in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306626951374095478161575953741034610129708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-10 15:37:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-10 15:37:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.xnj.info'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752354512255016624733449454092971289527421093224404137949914002800155971814061203487067714883505312766088200186534791539062036226402564823697172655851971125965785563575226059626377534997594893278543374461919630245440212511661135671543767436258648326737288015711731928888486930938706522800397449658027811704812390120290978261010138651292276187196425629520710045130071821095983616195246454438004986895093652063807794032481000658156932277835810513381691065840508086552208217152239888258597045126255770871891477654637966239444439434965658894762683386872865210157774063500555929936158661357484148842533831500665610356309560239563545911181920839469311714360425804683837470801105002261683236436519003462689609892910561289157239750192556598199367072584998898637280236481347198151354978330631921285919105018599221232912620005688459801942803247628052903816847976428921783514864494535413895471260517348664945597025878658378651783798540296934159017684202873188465681760653429465077839620361359278359484872552519422211467455081915825661010749540014015275078232414789615252355168570675684837802021774679611044483680268435459951738764306186228205878462048153328716222691007920802264627832517722238164260105899990069905382658828199753667102603612861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c30ada5c937aa4fd893fd7a231fd37c69374d9a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xnj.info'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702ff613bc00000403004730450221009848c3335fe8ebbc711fc3f306eadde4b7a19962bea73a117d7cda87307197f30220038dda065ab2ca93f5564ad90d59c4ec7800e79d025a00f949121887d363672c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001702ff613fb0000040300473045022014a3a096e4fce274ebfe235cc67c1b37ece8443480d7fca30191c85fb0fc6a21022100ed27487820e4ff6531655837b29720d23d0ac786100d82c7db39cb80d4e3770c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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