ujf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:b7:84:c6:04:0a:d9:fa:6e:05:67:8d:59:85:fa:3a:4d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ujf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:b7:84:c6:04:0a:d9:fa:6e:05:67:8d:59:85:fa:3a:4d
Serial Number (int): 343929128712799186842706739341608527477325
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:db:18:ea:a8:32:83:86:8e:d1:af:d5:a3:93:e3:37:ca:2a:a5:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:a7:f3:0e:2a:bd:25:f3:6f:90:7a:62:1b:6c:95:3e:e8:1e:dd:1c
Fingerprint (sha256): fc:8c:40:9a:ed:86:42:cb:06:01:2a:eb:12:9f:21:8c:3b:b4:a1:48:62:b7:90:d4:62:59:04:c5:00:e9:3e:e3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ujf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ujf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ujf.org

Other certificates including the domain name ujf.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for ujf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343929128712799186842706739341608527477325
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 16:30:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-06 16:30:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ujf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 869698356758688809741934686676072584120390384771847465826207813923502342840765173394404042702383789422013810112188656098977934935095086991637208269308731887008380524088951718627076333340038850181637580988856882849786824239017933564943271741876736844394938337215953219039223896461949532472945916086247851039505269571124943646499444625494434609922987670964781934877504126626196221738802420086843455723483524368562238280529592987954490832606882155039736903614573285428575712485574265914517152990225445865517325738160022079019975044842687136382944945827283224550366514157643262631690512753469956629472751876428530389685214735002034521679013135061031662235798882175648697648819487765895125809867339575664029752424480140035915275980793232985205715797863799763701046936574646512787560911736290806200294051250948318764990889521021925075407697569373872565500290699581307702137981936276152496765415795565634623715087246439111350827146318170910561314088458015236553990729336883636334006102002184043802807576585442306812850905188582632182618355357417592229179397979750689603753500957139044051819515112560918318614467889367983529036256969553345469679429768095986813429389421446498565881046430785879277108066884303018706100467275395787235263527169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8db18eaa83283868ed1afd5a393e337ca2aa5e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ujf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170bb330d4c000004030047304502207222f11e9ce4c9562f8a5d0c44c3ca50b727b1ebc141965d95a1cf593cfbb9f7022100953ce2ec34ea85f037518f6da5be517c6d7ed2aa34431900152a3fcd1b7eea1000750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170bb330d0f00000403004630440220641426ca5df48b0f6c02b2c89f4dd260586c994046fd59bd5da29d5644a530df02203812e63ae68b815440b3b06e8316350905d44bd5e58c66cef66bccabadf78aa8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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