kioskmagazine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8e:d2:c8:a2:8b:30:d6:99:25:f7:16:a5:50:13:04:f9:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kioskmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8e:d2:c8:a2:8b:30:d6:99:25:f7:16:a5:50:13:04:f9:f6
Serial Number (int): 309937133533318726145378978053456444848630
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:a9:38:f5:d1:82:44:c7:c2:65:10:68:cd:84:b6:66:9a:df:34:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:96:80:ce:6a:3b:7d:e9:21:09:71:2d:71:72:8e:9b:b6:a5:be:42
Fingerprint (sha256): 15:c2:4c:d4:c4:75:47:4b:2c:31:4b:a8:15:36:65:cd:5d:a5:a0:39:0c:ee:a5:c6:2e:cb:82:7b:f2:3b:55:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kioskmagazine.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kioskmagazine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kioskmagazine.com

Other certificates including the domain name kioskmagazine.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kioskmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 309937133533318726145378978053456444848630
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 00:43:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 00:43:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kioskmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 923175694337350138408000079715090888359599764346817834850521531199981763312668589158418011721020982207862852222329070040648001213220485514595199347620132760557298044599875044232306860389609168415698709689526061831430388991597612345404003512027646855125805369208153403116937263697324520759205933311713314670429484839549818089389731180207429729638486952597280534998585710080319853000173423878225603195446484051153646202402275356005682596448924772191731406631584308809609188386153579663749422366861950787674799720777432633210338162254804387570941621874099711756689973672710776592669913794663638553970204284447153308847297025735625519924925788210681517224168757246956288573838996710471480168152476529502675469026735611982845314707055063692815620595200792206750615263786075443811528536691462021218137614597645273911274899906787580361234811749360014135846517692636357389322300807721024944465313472270897767776010707743326753868435070640185939697555033696706840446255579236949356904196765749654634443794148202286670526976816180733404432830227240178118251093736102197281270647195850417039484655226209469021604070712209533957172392737096726099209009176802369830144753569367066592031660082755350013205817066639978273234630327199492724826134131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4a938f5d18244c7c2651068cd84b6669adf3442
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kioskmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f9c91ebb10000040300483046022100a4dddb4bc5c84087cb26f6b0273ce5e8d27a4643b49b0df4ca619cdbadf227c9022100eaf345f0f353d8de5e0a50aebed7e230a5825c30e58e8c26545c0d798e96174300750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9c91ebcd00000403004630440220158427ad4287cbdc3572235097c6e27447f98e7fdc168750f0eb129a70144f5002204735954575b692d9fe320673cff39b5df526f5c857cc410c26fa6c853094be0c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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