gitea.dkw.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:69:f5:87:9f:cf:30:43:fb:1e:26:76:7b:88:8b:5e:f2:61 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gitea.dkw.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:69:f5:87:9f:cf:30:43:fb:1e:26:76:7b:88:8b:5e:f2:61
Serial Number (int): 297392871382340779279557131728576137065057
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:b3:f4:da:fd:21:e6:6a:7e:78:21:41:6d:65:2c:2f:ef:06:a4:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:83:da:1b:8a:7d:ae:65:ff:70:ec:4f:2d:70:f7:7f:6d:8e:81:2c
Fingerprint (sha256): 02:82:6a:69:79:1b:69:56:56:36:e8:24:23:70:87:ed:38:e3:9c:01:a4:a3:f8:4b:da:a6:c3:01:18:cd:ba:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gitea.dkw.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gitea.dkw.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gitea.dkw.io

Other certificates including the domain name dkw.io

(limited to 100 certificates)
dkw.io
gitea.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
csci.dkw.io
*.dkw.io
ka.dkw.io
*.dkw.io
karen.dkw.io
dkw.io
karen.dkw.io
clc.dkw.io
dkw.io
*.dkw.io
*.dkw.io
*.dkw.io
dkw.io
dystoria.dkw.io
spartan.dkw.io
*.dkw.io
clc.dkw.io
dkw.io
nsat.dkw.io
karen.dkw.io
*.dkw.io
dns.dkw.io
*.dkw.io
dkw.io
ip.dkw.io
spartan.dkw.io
dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
gitea.dkw.io
nsat.dkw.io
dkw.io
dkw.io
dkw.io
karen.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
vs.dkw.io
taiga.dkw.io
*.dkw.io
dystoria.dkw.io
*.dkw.io
dystoria.dkw.io
ka.dkw.io
dkw.io
dkw.io
dkw.io
mail.dkw.io
*.dkw.io
dkw.io
*.dkw.io
dkw.io
mail.dkw.io
*.dkw.io
*.dkw.io
ip.dkw.io
dkw.io
karen.dkw.io
nsat.dkw.io
*.dkw.io
ip.dkw.io
cloud.dkw.io
dkw.io
dkw.io
dkw.io
*.dkw.io
taiga.dkw.io
dkw.io
vs.dkw.io
dkw.io
*.dkw.io
cloud.dkw.io
*.dkw.io

Certificate

The complete raw certificate details for gitea.dkw.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgISA2n1h5/PMEP7HiZ2e4iLXvJhMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDUxODM3MDZaFw0y
MDA1MDUxODM3MDZaMBcxFTATBgNVBAMTDGdpdGVhLmRrdy5pbzCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAMBFZhzs2sFfWrmTVWU+TM/EsgYvuxZKLrzG
Iu86QVEa8mjnPjE1IKh86avVbf06IN8mg7RRmlXRyciSt4E7b+j6pYKVdHqgONX6
T0k1GQkcTYuHcfGehOqdkct50G/2rNSN7vxZsctkBi40Meva4JjjTyWWVvzNqMa8
H2EJI6A3RbrwQiPx1CX14otKBXL0Py7P23vAZTpyrVf2G+7ifx+72woE6txy5z9C
LH4m0COnnG79tFf2rHeh3UFCw2tLXJ+PAz8uhkuu7QhbE+2DE0qvfQypxy1pWkz0
nHT4bkuDYHpXqOVPFKNVoeR0dDiVLNfS842eXcV6QceD7448RCvifnwiJEo9c/nf
65BVVBvTqW4Of3IMdxlOC514yV52nbhmBUKetyuBPuPV1xKg0j19jh03m1TVLWPM
YcWMuMKfJcc1rmtjcNToZlavX4yCMNZBsB9oEuOCOm1tUi79MlPFyFLcH/uASWML
ABQ1OsxPUcoNcUHlt+ruiMr59kn0kdMdowh7Jd5Opkkug0rUgeqf8kKkSCR7PvxZ
+XcVcVvVl7VNyn/Ksnl8RUPkMX1KPO4wPVaHY5NkJ6/SicBFt7ZQG0E+dbLwrsIM
MaCDrIzOUwqaxET9IIkDsqO30+3peZHYWyVtySSprsJX9I7NTJgsiZPe5nwuly5k
57/8xjOlAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNmz9Nr9
IeZqfnghQW1lLC/vBqRQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZ2l0ZWEuZGt3LmlvMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwFtsoIgAABAMA
RjBEAiAdpwzaXE0tT7hKuRVhARo+zOdy/aehhmWLf+L8jDhcZAIgCDjwWRI79Gds
bdcoQikknllA8fhO7HS4S7bZcf7Sey0AdwAHt1wb5X1o//Gwxh0jFce65ld8V5S3
au68YToaadOiHAAAAXAW2yg4AAAEAwBIMEYCIQCUeQ7WOQHc+QVa1BjBl9N619Kf
ByYHehw4p7Z0H3BXWQIhAMvDMUV/qSU1fiA9vUDiC2+xPzLriQfIxZKSfLGweupC
MA0GCSqGSIb3DQEBCwUAA4IBAQCDWxSJjmxx4JemOZMKuAmUX0lArbgclYTsrMGw
nuV0hEE6Hee158QftX4VO4VMOK11jneRGlzbO0XDaDPyDoWQ5dD3wSIlfFHhSIxH
1nPMz0mhAauus+Jy99RZx4JHYEVibC7LVxeREOeYpODFmuePnYDgzlAml4eJ5zV9
oe0NtI3DooPVCkS7ZQWxDAjbdfAxXR22sqphymy9xK9mUKNgoPzuAgQ4iq/VPNFE
NHDgJtGHlPMWbrGW64LLOOOBbtYSoTFFcod0fpUi2sbkn3D4XmQUTg7SQhkJcU5o
t5fXoT8KJuXQqTaMow1qB8bRNpnvRIGE68NLnwtzXvKzzE1A
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297392871382340779279557131728576137065057
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 18:37:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-05 18:37:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gitea.dkw.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 784397609202378576780080972338656824274316588047084561452323979582182165087383404973912867630951197681074876498270824806227917038150852663278339210753451540057977505185763393757718973931239518363353565324274649952235233694290417154566849939023959879862425365641181884270591391343079110392055204900221482347288878853917579318221836279228979128069476205728852708150517561630707009525448132038635240688929849533941878061454348415532348649004033578138401101665085095006165085925860688125263146805159985888235151600495463662713984175672561918026574822783424306200028339767735739648120537115818303535295222906549847374240673668531193091208628016926963614535768568442430237888392457353355593390259024789072865033077537111797081778632767505100737047035059075646495184747040309996841452562932819940776121164908661979972380209764553525803795060176239939531250399436705190602544841692717284596194040873769912529787928638866668995415001689832986503014494135778829702517996828823346295497776217876185059208242734677242228746819576396529881540482270906977971849938503538388326401611449105087881382402845530217836290283793784595515095619496677813079180333123551752651056211573129352426816850283511739194946892350726127532910973645255664310241604517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b3f4dafd21e66a7e7821416d652c2fef06a450
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gitea.dkw.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017016db2822000004030046304402201da70cda5c4d2d4fb84ab91561011a3ecce772fda7a186658b7fe2fc8c385c6402200838f059123bf4676c6dd7284229249e5940f1f84eec74b84bb6d971fed27b2d00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017016db2838000004030048304602210094790ed63901dcf9055ad418c197d37ad7d29f0726077a1c38a7b6741f705759022100cbc331457fa925357e203dbd40e20b6fb13f32eb8907c8c592927cb1b07aea42
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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