www.kioskmagazine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:66:a6:b2:9d:85:a3:5c:25:be:ec:11:38:b4:1d:26:fe:a3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kioskmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:66:a6:b2:9d:85:a3:5c:25:be:ec:11:38:b4:1d:26:fe:a3
Serial Number (int): 296267238492283789291090967797532969074339
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 78:fb:9c:c4:c6:39:21:cc:fe:8e:99:20:92:72:5a:1e:fe:dc:25:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a4:8d:4f:d0:00:c5:fd:42:fd:b2:85:8a:d4:3c:88:cd:d6:cd:c1:f0
Fingerprint (sha256): 06:cd:f4:24:18:25:f1:ae:82:ce:73:e4:ea:01:5c:23:0e:2a:4e:f0:ba:e2:ac:c4:bd:6e:bc:5e:c0:4f:b9:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kioskmagazine.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kioskmagazine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kioskmagazine.com

Other certificates including the domain name kioskmagazine.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kioskmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296267238492283789291090967797532969074339
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 14:45:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 14:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kioskmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699695438079269444286072532498702373177354564421449600735879400888540609132305579549949765380976601464056099534421602411151761038285173365295968788352497778919642841792208852673074816419195743938566493660547617714821715700644190994742302232946260737738561988089550386473539542591529453064433285788294363152644471720445800897928877751652572844923293382880270316504567015551843339837842906180970195186107147468443504577512139070293396776636718700292868935943173028066704354886235400586575940972097242026702708959722076222326706950874238563182416879061245623414200444031039259573542449382504749779866206651434263854219269072922566872081131413020850479008708555338246935540396728225452975716056682069574733031183960517941352414887524178128542035290721730779644939990795569656943754252837220279870400403746862307966189197572375407151186699171255713943037469399514183215728543785651292955321952303970544221997864755423373516693779804874121118303033000025698650957282421983325764050833682490967960992802813444405114434039738959236165127746013377289830031812237881534855525963710450901685443814236909587926963209968317035807523345074767972309110025419521221652111120203111361683399335037368385093790092386574312233469244614008175204675314879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78fb9cc4c63921ccfe8e992092725a1efedc2513
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kioskmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169ab3ac6e80000040300473045022100fb28e6e7f1c369d2d7e662fc49db7b0c48b6926dbaf20e099af9277f4fc7b3ba022076531f7f0403110614f4794b72d034a9556f5b6ed5033f2a467381a28338d10c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169ab3ac70a000004030046304402204a7e15e7d5b5a9f7124c91e1f5f80ce3c742c1e49debd5a9b72e130caddf08d902201d904ccddf500fc75aad87a5978e2a90aa4e4c9a195b788ec623576f690a5683
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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