kormotech.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:8c:7a:0f:89:68:40:85:de:a8:49:b3:a4:25:fc:b3:4d:ff was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=kormotech.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:8c:7a:0f:89:68:40:85:de:a8:49:b3:a4:25:fc:b3:4d:ffSerial Number (int): 396250921582860822711271372460271059815935
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ec:9a:93:11:4f:f9:79:eb:3b:23:13:a6:24:ad:12:8a:dc:aa:30:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 82:48:a5:6d:0e:33:27:8e:ee:01:37:bc:7e:b0:76:4f:7e:fe:a3:69
Fingerprint (sha256): 04:5e:b1:05:54:7f:0d:38:93:41:10:0d:54:fa:1b:73:97:c0:ed:85:67:bb:1c:04:90:e7:63:f7:57:e4:5c:e8
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate kormotech.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kormotech.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kormotech.com
www.kormotech.com
www.kormotech.com
Other certificates including the domain name kormotech.com
(limited to 100 certificates)
msan3.myabsorb.eu
msan3.myabsorb.eu
kormotech.com
msan3.myabsorb.eu
*.kormotech.com
kormotech.com
kormotech.com
sd.kormotech.com
staging.kormotech.com
kormotech.com
kormotech.com
kormotech.com
msan3.myabsorb.eu
sni.cloudflaressl.com
kormotech.com
kormotech.com
msan3.myabsorb.eu
kormotech.com
kormotech.com
facilitiesdesk.holmes-hills.co.uk
staging.kormotech.com
msan3.myabsorb.eu
kormotech.com
msan3.myabsorb.eu
*.kormotech.com
kormotech.com
kormotech.com
sd.kormotech.com
staging.kormotech.com
kormotech.com
kormotech.com
kormotech.com
msan3.myabsorb.eu
sni.cloudflaressl.com
kormotech.com
kormotech.com
msan3.myabsorb.eu
kormotech.com
kormotech.com
facilitiesdesk.holmes-hills.co.uk
staging.kormotech.com
Certificate
The complete raw certificate details for kormotech.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgISBIx6D4loQIXeqEmzpCX8s03/MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDA0MTAyMTE2NDFaFw0y MDA3MDkyMTE2NDFaMBgxFjAUBgNVBAMTDWtvcm1vdGVjaC5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCcOAXYLjNIGCGKB1v56gpUSlTkht0Z0EPR mJ7EjqMg8K3SssnfAi5qVZ1FTKJrSMCV/gUPVLAxK4sOGRq63iQQiRiteBVG5gf4 2YDyN+t1xdsLLQRmKweIszINd2qFLuT/dLis9seTHeleaZTECXQin2dRqcvW8AtV 1vf3N2PdsxmKfB7WVQR57nnYY+zjsvmwY4vVP1pLKtDXu0qWpk3WLV1K4r0fNL62 kue44H4ad9b+bIYtDviTmiEqg/iauIMR78D8QQB2uvMmLoRrd0exq+jF6EdNh7wj SXAFnJe+53+lwQhQCah1z3JGW1U55zBOU9FzMPvGW5TJJ+tMOKsRo/H4EaRFujdp Rfqz4ibVaqCUObVwnoihHTrmvpK+lAC/vCbdhL4BbKKljsZww0yP6DVPkAzc8WRu k3GmVuPlRPmCkQPGZiVYSdCRR7z+7Hn4rM87qDT8bkmlmGZK3EOhZnefhWly+8oG LUc0dGemv+zCBSWXuuaEqGjxYmC/zhJ5pOQ8LdZyIUouoOG7wTLWA8OHp4fUKWuS qJI51twF0Vm7d2fGQakuNjTItYKhJPRybIfUBZ8WL8pu4VZhfj1ZfQYcL3aAvdIr SIS/7neyCvW/1uBcxn3gN/NH2YHdyObW5ya4g+/BWpTNm5wgqP9M0YQCOvnZKzCk sJcgythFnwIDAQABo4ICdDCCAnAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTsmpMR T/l56zsjE6YkrRKK3KowLDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMCsGA1UdEQQkMCKCDWtvcm1vdGVjaC5jb22CEXd3 dy5rb3Jtb3RlY2guY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8T AQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIB AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDn sklTLe+LkF4AAAFxZiqf1QAABAMARzBFAiEA3d+hdjiKgjYHGjh3DvaEHITmskYV lnQkZfQQZrkskqwCIH0ErjYUi4h1b853sh4rCXwSx2Qwo1Mqj35pdNHzMiBvAHUA b1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFxZiqgDAAABAMARjBE AiBaIt4+uEjCvUh74UD0oXULXCGNFAjIKWEhYypAfs2xdgIgUm/tLR6Fs6pBxqRG aiscDNgWkeYYtY7nZoRW+8mXW1AwDQYJKoZIhvcNAQELBQADggEBAFdWBLCL7eAX XjT+esIakbbye9VC1rlfCvXodOxKgyS/2Y1L3LYlI5k6Ya9gfzdiQPHfeqi9iNuM MtBKb1FD9MXGO6l9LK1+uVZJQbcoSMHmqICSyXK0Z/NI9g139OOIbQfjJIzss9Gf 6wPjkCNW+haWJWT7XmrQVwHgCItdvklw2qcI2Wkcxg05k0Qo3UBayNFloAyfIP+r rojZvP021lpqmifgkWKMIPpYS3a588wJHPF74/NL6Z2TucjsM1r4Hxo86BTZL8Gv uKyEN2K3pTL5oM0cNghctwgLL0txoJ30oLWMLXGjd4HTYadGeyFFrjtS+7yB6cwB GLzPBb0Njqo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnDgF2C4zSBghigdb+eoK VEpU5IbdGdBD0ZiexI6jIPCt0rLJ3wIualWdRUyia0jAlf4FD1SwMSuLDhkaut4k EIkYrXgVRuYH+NmA8jfrdcXbCy0EZisHiLMyDXdqhS7k/3S4rPbHkx3pXmmUxAl0 Ip9nUanL1vALVdb39zdj3bMZinwe1lUEee552GPs47L5sGOL1T9aSyrQ17tKlqZN 1i1dSuK9HzS+tpLnuOB+GnfW/myGLQ74k5ohKoP4mriDEe/A/EEAdrrzJi6Ea3dH savoxehHTYe8I0lwBZyXvud/pcEIUAmodc9yRltVOecwTlPRczD7xluUySfrTDir EaPx+BGkRbo3aUX6s+Im1WqglDm1cJ6IoR065r6SvpQAv7wm3YS+AWyipY7GcMNM j+g1T5AM3PFkbpNxplbj5UT5gpEDxmYlWEnQkUe8/ux5+KzPO6g0/G5JpZhmStxD oWZ3n4VpcvvKBi1HNHRnpr/swgUll7rmhKho8WJgv84SeaTkPC3WciFKLqDhu8Ey 1gPDh6eH1ClrkqiSOdbcBdFZu3dnxkGpLjY0yLWCoST0cmyH1AWfFi/KbuFWYX49 WX0GHC92gL3SK0iEv+53sgr1v9bgXMZ94DfzR9mB3cjm1ucmuIPvwVqUzZucIKj/ TNGEAjr52SswpLCXIMrYRZ8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 396250921582860822711271372460271059815935 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 21:16:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-09 21:16:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kormotech.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637317260570843615321447929230404408794512046651707579757534222287604230058166741838854718724575437573996374833039641182038876206685409806820747053158671160366921800325582365496668133789710467069517611680129295268954284871447626826546027252948576765008333208357973151429747638141580044776287952920787272675495020792579697197610052891092308215412319214058594126925653201433789590834321842265508704368445967223904426109078532789042770261578418611345709120600005195949326583408466572339667137090038318026470714345824826909286086029321986945702265610747260834334734064538970773045176427845207623348393822850207188541376523704796048028839486966277659212068119581588843344586749404436340450924257178738626712752877476883474078768044042999930119704460074057858530522940203267748133092807911206021096451342475185948258000647462483505050636715944631127798487387291662956196350154529753099205960711476816360548472503789205238381989812237283415750443602325285098374976787212773779844157803548101574214785615389786214706364058897825244509680427704939362985204496124015922531636947465107653837602919256867646073364218037151265378186849794299694196108509886013213192144842568667424985156914467311649241722145935287167456072899271783911991358801311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ec9a93114ff979eb3b2313a624ad128adcaa302c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kormotech.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kormotech.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000171662a9fd50000040300473045022100dddfa176388a8236071a38770ef6841c84e6b2461596742465f41066b92c92ac02207d04ae36148b88756fce77b21e2b097c12c76430a3532a8f7e6974d1f332206f0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000171662aa00c000004030046304402205a22de3eb848c2bd487be140f4a1750b5c218d1408c8296121632a407ecdb1760220526fed2d1e85b3aa41c6a4466a2b1c0cd81691e618b58ee7668456fbc9975b50 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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