www.tekst.website

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:28:aa:c0:e1:5c:d8:4c:02:39:04:b3:17:cf:29:9f:a5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tekst.website

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:28:aa:c0:e1:5c:d8:4c:02:39:04:b3:17:cf:29:9f:a5
Serial Number (int): 329447386901843494762811275115298227330981
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:94:9c:bc:15:7d:77:98:a7:63:92:2a:01:dc:fb:ab:35:21:51:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 52:ef:28:70:ff:ee:36:44:3e:e9:8b:b8:34:fe:2c:cb:87:1c:a1:64
Fingerprint (sha256): 00:00:5f:a6:f3:1e:2d:bb:29:76:b7:d6:5c:78:b4:5d:0a:d6:5f:d1:90:0e:83:ce:51:42:84:b9:7b:dc:65:f6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.tekst.website

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tekst.website

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tekst.website

Other certificates including the domain name tekst.website

(limited to 100 certificates)
www.tekst.website
tekst.website
www.tekst.website
www.tekst.website
www.tekst.website
www.tekst.website
tekst.website

Certificate

The complete raw certificate details for www.tekst.website in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329447386901843494762811275115298227330981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-03 23:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-01 23:07:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tekst.website'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824369919270904598647669982039232056082811511264950456871710322397186296864409043537043097887380705986594635283942656072618110645686466666265803478161893953287188125508438890081506848487668063851289637781949627468797187436359939206930963368843582656305205704087388297387638637633281902208783830048062869910475983766227439046901908071876232133318719302932993956347234623562148005897869778014014561346544235392317728219627179115428249882937053922411238758520460213858656311753867116312679302541472496190166623546453852457803977091689842509530650959463315326499885689090027347827449826385926229367534484153130245375976912086279715168699429107642615244224772180052914178577171947136959567150611206972606031523394424388106236673459888296465792754356980015672527664355395498403816278339629837279687395031104198079787943268475428197582568206216591302238305649353184312676303551814749167992306811142259552841250815446478227719071742635701680759685873922894175720227732105956501713953389515159594028230518663548932089207097345306750286733295447423343084966903052014458997179230953685910365820094600856882524187578169470916094931725562196687413583359874549742700188029162785176020457685749849474895995518140437810514126237259069234043442289723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25949cbc157d7798a763922a01dcfbab352151f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tekst.website'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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