lyoka.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:53:ed:5e:b8:66:fc:1d:57:a1:bd:40:9d:87:77:69:1d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyoka.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:53:ed:5e:b8:66:fc:1d:57:a1:bd:40:9d:87:77:69:1d
Serial Number (int): 278462534560489640789394533924723825797405
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:ad:43:d9:d9:dd:9b:82:b7:83:cd:e7:94:76:2f:72:32:6d:8d:86
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5f:a8:a5:84:58:62:df:63:3e:95:d0:60:e5:56:b7:72:32:50:33:9a
Fingerprint (sha256): 1b:77:a8:3e:31:19:17:2f:dd:87:ff:21:92:70:3c:91:81:6a:42:98:42:f1:cc:7a:62:ed:a8:6b:c2:63:a9:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lyoka.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyoka.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyoka.org

Other certificates including the domain name lyoka.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lyoka.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgISAzJT7V64ZvwdV6G9QJ2Hd2kdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjMxMjEzNTdaFw0x
OTA2MjExMjEzNTdaMBQxEjAQBgNVBAMTCWx5b2thLm9yZzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAKRiMxWEh4e3tcN94z4+0kwlHljVmeGy8nVPQzeS
VjuQduRpJS32gm5K1ahDi/C4EhMWFtaklbLbw7yMdN16eh/HWISPbVsFeOjbmItx
qHXbdlic62BOFbNuQgEDFIKL92UXczSPvBJoEGQx9xvYAtkM9WzchpzyHSPYBybr
QhFq9+yAf2ylsnGvN62scv9yXfelssKTUsqJnSwd9MeOgWsqJU1RIZq1OD7j9sFZ
4mTH9IvC+e0zoF6HKrZNTUd+X7Kj8yb0oWMW3htfXxhb/pkqyagGgrQEBtaum0xk
L2HTAqAJaGBW7VSDXjnQUzjxwLo0AhfgidcuFU28Nv+SbltgBVhgQPvNtQD/xaK5
yxUdeMwbbwQPEzLCuGLYZdlAY68sf9vDoYky5oV2WAU6YR/zQN+EByfZCZ8S/+hH
L9n6ATRLrjElnF/KL/i6ncp2sKHC0eWxTiwHq3lQom60Vd5EgFuNQU8WDNtkjD0i
5iAZTnbeE4RdHYG8xI/nm7J3ZiRzBDWt+GXroz/dDxD6Y78IbzG9MQxlpPFgQCFx
1V2HxlaaO17ZIKlKDi5kPgrHPhT17IpY0XxDGtfKeYINm6I8GiEVh7dgwx1wyj1m
RD/DtJZaWn5yYCu3Rtvna3iQn0q7KT8qVIYjzZE2JvQP3obmX4jzZrFsut/HP5z+
KjjhAgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAetQ9nZ3ZuC
t4PN55R2L3IybY2GMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJbHlva2Eub3JnMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA4mlL
ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFpqq+9FgAABAMARzBFAiEA
3PNe2OB7G65wOA1Mrp186GuWuBwPSOKIL9rR87wW54cCIE9RF61Py/BphqGNWXds
gpmfCfuY1LS+LlxL2e5WK6l9AHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHH
aFRL2I0AAAFpqq+7KQAABAMARzBFAiB+Zqc0uuuXRbh77w+NF1zjXDwNVoqUjkEB
EUmjEIWNcgIhAJffdZL8Vx1IKSjtFqG6YGQ7EsJvZitHwaR38qDS+DzfMA0GCSqG
SIb3DQEBCwUAA4IBAQAxAvZExRCZ7qyrBST9QbZrMEU4XMCj+QxBlM0Mu2tkG8T2
3uCHy55+QK9tHKOZ5ys6uZMa42Jb2kJLEBGLBncTGRPsV66a2t9DN5sThFCe1978
cSrWfq2GclTa1RCHfSchMfzlQuJQgWcqi/zvM5M9JyFLUY6ee0BrUFLSiUKGPTC4
xupJorSZnE9G4fcyR8OyoGDqfKEATHyL3nafW+s83uC9OarpzepBB6oBKa1U6iFX
yEW5i+1eShv25J+lcXuNo0g0u+13owTr1WRIHzcoEC2/s4CrCQG2ln4Xw+okVcYH
0IpR41vRGhmOFdEqEvw/wM6+Dld0iqyJ2NPlLQHu
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278462534560489640789394533924723825797405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 12:13:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 12:13:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyoka.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670626545904297913958796210610499875532259112011898925897608941472701588820148374771826711733413669375251676379530217341061331326077833128335558122031484889213805687645674332646050135143507692371894235668029939447144803536429393862509417220952251899001637398748226686723969581332640701372172981838705188792801231592297617314710234265894314803529151417537145343899271400852368907162622520727468074284680421346454557748855628325091856310513880192239075257891018133943458052227096275134876542051924075105963811836638460658064767217200114785248823588224745913607285725372579325555049008104699539834275410743398016489958809253482742978509852744398172341711896829055511302027179270517827357459771773317448912393221910764164842232564255234732324124181126980963508139842859743621596159212466369340390773629031709559434540984392355373408988844774876011752792312234723644370552074757760908992127640703259259326597585630940847997363842355852146557016507194274882161080629681223486492179215812863642274832988258565752699578070829540472902285126682013827265336603242197247559479272062174116266104986124699561449761654878968424823455030671389923653567064735578540466879834914297620213468171755083912841880080270123424784723175783918791020251855073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07ad43d9d9dd9b82b783cde794762f72326d8d86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyoka.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169aaafbd160000040300473045022100dcf35ed8e07b1bae70380d4cae9d7ce86b96b81c0f48e2882fdad1f3bc16e78702204f5117ad4fcbf06986a18d59776c82999f09fb98d4b4be2e5c4bd9ee562ba97d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169aaafbb29000004030047304502207e66a734baeb9745b87bef0f8d175ce35c3c0d568a948e41011149a310858d7202210097df7592fc571d482928ed16a1ba60643b12c26f662b47c1a477f2a0d2f83cdf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003102f644c51099eeacab0524fd41b66b3045385cc0a3f90c4194cd0cbb6b641bc4f6dee087cb9e7e40af6d1ca399e72b3ab9931ae3625bda424b10118b0677131913ec57ae9adadf43379b1384509ed7defc712ad67ead867254dad510877d272131fce542e25081672a8bfcef33933d27214b518e9e7b406b5052d28942863d30b8c6ea49a2b4999c4f46e1f73247c3b2a060ea7ca1004c7c8bde769f5beb3cdee0bd39aae9cdea4107aa0129ad54ea2157c845b98bed5e4a1bf6e49fa5717b8da34834bbed77a304ebd564481f3728102dbfb380ab0901b6967e17c3ea2455c607d08a51e35bd11a198e15d12a12fc3fc0cebe0e57748aac89d8d3e52d01ee