kxcompany.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a1:b4:31:a0:c0:8c:01:14:6e:b6:ac:36:ef:a7:48:21:48 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kxcompany.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:b4:31:a0:c0:8c:01:14:6e:b6:ac:36:ef:a7:48:21:48
Serial Number (int): 316361837591779858614947956604769334206792
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f9:9c:53:f3:34:2b:cf:7c:90:7e:4d:3f:dc:cd:e2:76:9c:4e:7c:d3
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:8f:48:7a:9a:83:39:4a:60:b7:82:ed:0a:84:08:34:0e:3e:d2:a3
Fingerprint (sha256): 23:55:55:d5:e4:5f:c1:d6:1d:66:be:61:bc:3d:8f:84:ac:dd:25:9c:ec:4a:3f:42:07:15:e0:86:0e:09:2c:9e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kxcompany.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kxcompany.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kxcompany.com
www.kxcompany.com

Other certificates including the domain name kxcompany.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kxcompany.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316361837591779858614947956604769334206792
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-27 03:21:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 03:21:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kxcompany.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 780469605142770470376014499910152862501589483891191886435258598964464326510845013699487079758186094694164882493174467713053862349120159281911906334276413231720276529403269310399197292229765283758300441164709974659253504992737015484603282342651966051964597283578453856476568563109687415640567483310146862403402506399231004527864149845791320704880530685315839402725789181383149243496187738628804911780821886582101967193258661198270576434891391226297728839797793683016801505995315288514216696849347366596011207846405186419681482929876958777436701481106139451255096350535519562217588894014281382228396333290009939055978013113028210127271728025256390248423156364655815563755181807323962682715276401291317337080405712098802214411874383883541757823078698346547283913937670183968299751147412791236871558130808851726455142709199906945761863313760000709644021404291887693986049086376961307351397568927466494848144570406010998000629473361282958521052323832681683128559042792119837032772364527749748686888172662480030593424793913985781316770124404887061399063735395398430296251777168427110187211109967339985025944625224773665654549336752649593634912911073568319927699713919838582518390737365678900071234144681938516019007770027967422290950641217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f99c53f3342bcf7c907e4d3fdccde2769c4e7cd3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kxcompany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kxcompany.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ca981cdda0000040300483046022100e9f45447b75a2c8ac83752716280721073f72cfce8ec88abb368392dda89b8a30221009618980c804c8149b0e6b2a6ea050db040275d7dc1e3ffc06d5ccf751e2964fb00760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ca981ce970000040300473045022016a6e02244200ea52d48f46c3f5f9d48252208842be44c2b280886ffacb9939e022100bab666ca8dcc9a9b8581c97646d01bbf19eafcd774acd10f1c13b7f1ff9b0a1b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fe11eb4e0ee090461649b7c9cc57711f16201f4f9bf4e83794f30432e6001061960d7a09747c22eef994d49be2077f7a69358015d8379a76893693a7d94073e44115687a5df0a45180c696bc03732a6e240c46f59a7aab5470edd9f8a176d2e0c96a5ac86f2d3e56b1029e5bfab27702f7fa66e394765de31918fef8ddd3ab8267345ba61182c6b082e7e146e6accd9beeeaaf9a38451634ac9b0bbc34f400847307ee37d255c8114a0a0ff48476e4b080a62a21d1b9f3f20be72612ecf1e8b973d5c892c18af5ef5c966e503d4949a89badf3197373e8073e915db9afc06b1110964a0a1ce274ee2471d248d051ee12aa8508d1708b82d60b629b61e41798f