www.krateczka.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:dd:ed:97:bd:c4:bf:cf:ba:43:af:18:fa:72:23:bb:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.krateczka.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:dd:ed:97:bd:c4:bf:cf:ba:43:af:18:fa:72:23:bb:9c
Serial Number (int): 313014488239445250899221524662716081617820
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:a6:08:7d:e1:59:e1:17:0d:ec:da:3b:db:ee:48:1b:f9:f8:bf:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c5:c8:14:78:2e:e2:9a:a5:c5:01:46:11:20:59:00:c7:ca:3d:bd:27
Fingerprint (sha256): 0d:8c:1f:4b:3d:6a:2a:d9:d2:b2:49:0d:f4:8e:5a:30:b9:8d:f7:96:62:29:6a:91:cf:a1:89:06:3e:6f:a2:be

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.krateczka.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.krateczka.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.krateczka.com

Other certificates including the domain name krateczka.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.krateczka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqjT7VYnhLDiBd24qayvW
rBGeTMRAnCq0FoSaTyntUvfRjnRYn3eH0w9Oda3BdXfN9z138+XkJvxTYBzZsc3N
V2Mqynjgb0D/LRxY3D37jxI4jo5GkCiDlx/v+sBTWqCZci+aUH0sMYThjAd6beVE
eM3B2GK/k7XWQSGXqwwNGPBHxrcxrIr0PF9C6SHJ99giYN3tN86BHyHA9LBZGWfY
rWF/OQJASu+imBrg66R4zl7/2Tfja1ombcFBSTdXzd6hzMggs8bHtj+//SAscrWq
9q5zGpQeNJTxYJQ5JwBfHj3I0KdWYg+KyX9ICG1Yv4vaUYyVRymNQOqnWCQQ+MG/
TcOwbY9YUzz6btDM2scnrfzF7n+K0LnUSXaCZHC+5TJRsd/y/xKP6QKz6KWD2mCK
Uv7IbVMOBXu6BysN5TzO4dXVSwSti0fMR1qb0mJPdR4EsHPTfL4jUi4+phBE1yuY
KhEHuiNK73/UeLIiNlR24h+miTBAIjs0t4TZt0ED4gu4WO+3nKfoOoH2L6GpIgxT
DpG59vbrDDt1zRX3Ek3CSvWrjy4tXd4y4o3z3TbyJazWF1gn1YfKOx1xSMbeWv5m
iDWDnrw2k84kbbv4j362957IEbRxFPGgNHuuxPCgeVPuHYegnWcih3a+klUleVZr
MWsLAnWmHudVNMOxdKNJr7ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313014488239445250899221524662716081617820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 15:18:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 15:18:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.krateczka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694383814922292121924055196468453496961654335354434644871643633107606828128185796488582973493805785629137439157620949665389900360076143432159341478630824643513105704626913129714107067563630170262604560116229466755331979676075201172819526380357429603165556405422677117338774333412447981567399591517114955556233075609577090359095171594925777781343119034706659047980275251095969704348662032529621456800026507823872167192251544980691287167914717918494372313903176318781442422341626752166281660575222786961749006492488506874772718110921460727069939505423236106550229214527681121533275135907290827906751711357914626205214034195150471207190016517189677657184282048953972201369878437615104981116833790417225092937366430791171772371789977684873784525685643714880985757313321180634012460896154953064783092476288209532582886840595688674632265060653817351934483476110762426070301161467866306708755898773702564129350923358813287016800048542283032516368288609036167422005060371083490186090977218010233360234489049097177329302835605401120253891552836407829975716296444577156692371586060794393407353279922768482672793946266261000792137916916308219589015788906322517470095703018590181686485462399774294826631190853170534446719351038339226157865086897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5a6087de159e1170decda3bdbee481bf9f8bfe9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.krateczka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db676c98100000403004730450220353e39295087dbb03d3e629622ed3a50d4a0e689e839d1c7ea30793e8c4ed74e022100d12544f61cacf4f31e5c27be1e8075bad6c935947445566f54a69451232bff6a0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db676cb8a00000403004830460221008cc2275fc9e3f414df46fb766d9f5b739d6047c5ca463f540771897e1c7ae9c5022100f0220829751f43ccc1ee23003c1603d7c09af008dd561da43f45f0f79134ccd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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