tektonik.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:9a:4d:7c:64:75:06:bb:78:ce:cd:51:6a:ea:aa:90:a7 was issued on by Let's Encrypt.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tektonik.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:9a:4d:7c:64:75:06:bb:78:ce:cd:51:6a:ea:aa:90:a7
Serial Number (int): 322792787282236472578682335612176675016871
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:e0:bb:df:96:0f:93:30:94:26:e6:4b:47:a7:7f:78:17:73:67:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5a:84:51:fe:14:9c:41:0a:9c:7b:c7:3f:08:64:54:d1:2e:b0:d6:84
Fingerprint (sha256): 14:19:4e:16:36:26:5a:8e:1a:be:f4:01:1c:60:a2:6d:ca:19:76:35:aa:c8:58:4b:b1:2e:fa:09:c4:4a:be:56

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tektonik.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tektonik.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ftp.tektonik.ca
it.tektonik.ca
it.tektonik.com
mail.tektonik.ca
mail.tektonik.com
pop.tektonik.com
smtp.tektonik.com
tektonik.ca
tektonik.com
ti.tektonik.ca
ti.tektonik.com
www.tektonik.ca
www.tektonik.com

Other certificates including the domain name tektonik.com

(limited to 100 certificates)
tek7.tektonik.com
tektonik.com
subscriptions.linxio.com
bk1.tektonik.com
tek7.tektonik.com
promo.tektonik.com
it.tektonik.ca
tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tektonik.com
konto.eriksberg.ax
tektonik.com
it.tektonik.ca
promo.tektonik.com
tek7.tektonik.com
it.tektonik.ca
subscriptions.hdtelly.tv
tek7.tektonik.com
konto.eriksberg.ax
it.tektonik.ca
tek7.tektonik.com
tektonik.com
tek7.tektonik.com
tektonik.com
it.tektonik.ca
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
tektonik.com
myaccount.mylittlemascaraclub.com
konto.eriksberg.ax
konto.eriksberg.ax
accounts.ntsrd.org
konto.eriksberg.ax
subscriptions.bluume.com
subscriptions.infodriveindia.com
sub.kiwiz.io
subscriptions.regtify.com
tektonik.com
konto.eriksberg.ax
odoo.tektonik.com
konto.eriksberg.ax
konto.eriksberg.ax
it.tektonik.ca
login.minus.io
tek7.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
myaccount.justsoopit.com
promo.tektonik.com
tektonik.com
konto.eriksberg.ax
tek7.tektonik.com
tektonik.ca
tek7.tektonik.com
tek7.tektonik.com
konto.eriksberg.ax
subscriptions.mleap.in
tektonik.com
tek7.tektonik.com
tektonik.ca
konto.eriksberg.ax
tek7.tektonik.com
konto.eriksberg.ax
tektonik.com
tek7.tektonik.com
tektonik.ca
tek7.tektonik.com
subscriptions.hosteddialer.com
promo.tektonik.com
promo.tektonik.com
tektonik.com
odoo.tektonik.com
tek7.tektonik.com
subscriptions.urbanstream.co.uk
tektonik.com
billing.zerotek.com
konto.eriksberg.ax
konto.eriksberg.ax
it.tektonik.ca
it.tektonik.ca
plans.tektonik.com
tek7.tektonik.com
tek7.tektonik.com
konto.eriksberg.ax
konto.eriksberg.ax

Certificate

The complete raw certificate details for tektonik.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322792787282236472578682335612176675016871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 03:18:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-09 03:18:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tektonik.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753685054070856843620148457332274641017019582625128456736180179351912657419117657622906640635829688983258687062963953624366781365745604413357399427527218461885250784003696132377686509042239175191522311461605658221745029496660752195374810243037459281984485263113525556429829950533511531129859851927415747402892995629600633079903989924500194440184187614704778303298043228010847371731592310689054696772237626624108877717463338315487409173568975994549759456355820496087262017507946846463107817378247844682949728503411728122812825681872424786160195373849765458613476906380983371985335268227550212639889757437992692438649766350343837717022418319217228453545277511807413482915266921239058768258493913142769364449490015693673694575601777159107667929590891955317838996874065204876858571868152356924966629200777119621233129250001958557730928217368027824809899006819529626330040011816272865550751821811227197556972581245315115016255717585022310636992946560863929061177355919793897873344623069079490415050305121752733698100505615367289430783096669734634709674664280422419329699242488502825665235854397684615665282384628018094261472883617751791958139806197988063935081581289892359450267458533155123258956565827748751028996949357249449762110359839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1e0bbdf960f93309426e64b47a77f78177367e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (222 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ftp.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pop.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smtp.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ti.tektonik.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tektonik.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tektonik.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001696af976be0000040300473045022100e498114a0774ef335d7416554d6b854579fc0324e517cbc4ed21f6b64d0eb4e902200bc4415be1a44032eb11b23090f6be7eacfb07631f464a51e57a43d743f977ff007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001696af97926000004030048304602210082edd2b9ab3c546357de80cce32da32125aa380367f9ade383eeb4f47d4ff472022100b5abe4a8bbe49bd910f9390fb259f1c4d8e17a94a1e8b2d41e34b147161ffefe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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