hoikushi-go.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:4f:bd:ce:3a:e3:19:12:cb:37:2b:93:e0:11:32:6b:86:85 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hoikushi-go.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4f:bd:ce:3a:e3:19:12:cb:37:2b:93:e0:11:32:6b:86:85
Serial Number (int): 375583745612523642222675771772917133313669
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3a:5b:22:48:1d:85:62:a7:49:68:7c:81:db:f2:6d:a1:bf:db:db:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 01:12:a8:a3:e4:eb:63:29:10:ae:b7:f8:0a:a7:ba:e9:a9:28:dd:4c
Fingerprint (sha256): 10:a2:9d:10:5a:1b:12:4e:b4:32:bd:d6:94:e0:45:6f:dd:84:bf:42:1e:28:be:43:39:fc:cf:d1:3c:e5:62:2f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate hoikushi-go.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hoikushi-go.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hoikushi-go.com

Other certificates including the domain name hoikushi-go.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for hoikushi-go.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 375583745612523642222675771772917133313669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 00:30:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 00:30:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hoikushi-go.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 694980571978331978137599094374366329429212970191897779019637240599824851654691582839996168992933916957877241460924172098773533811780129749468483916500877909339340778390123114041876161232802178761630077181108431643310414135106687709276775349355351950111824854026630157438170080378439166216901053968160077032803748880226518357481053119063008943364489264725631292535743662556698581966651861001036390647423511508560261014386066159711719226660256609736372056980727724246785299198171250287572322326226990140501494126295412156027641084145009396534044131890348525947133304855126957681127012596214412202620646693963078351171783451621240370769395230566977080541706952900304829367358219559793164185115192407908896056734896078320869526203808324201081133707748501293353294893946498614236055353834934723327495484143265852829823618694484549991734890436747801648944822100229489475094985617301894152604684573401909066099250413126033413797653356282367802415466176083477704774080568536416241825960247526831050588555468468281979628798352912182406971819499145375879460938905336727470565615216536446402146261702129015042177659960932828126693235339997372525458543811526094575003678556855724118191676639602960298447760854255002295578573162661182857500090651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a5b22481d8562a749687c81dbf26da1bfdbdb98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoikushi-go.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170e0f725a90000040300463044022040f6da603ec6aa6256dc11c858a206e3d9048bdfd341c835b916eaeef4bf4e7e02200cd9ba54c9ae9690215e0d0190f8cb8660711979cc5e8d4f063a033d60cdb04e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170e0f725d40000040300473045022100bfea9cb004501507f7584a5d5d7107d54f7c2799a3e74890136e53c4748f82a5022078a21606155389d45056a1b94a34b32cc4da1a112bb4bb1c5d806f831624acdf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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