www.pkmc.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:ce:0e:2a:9b:88:07:6a:b9:8d:6a:26:02:a3:40:8a:62 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pkmc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:ce:0e:2a:9b:88:07:6a:b9:8d:6a:26:02:a3:40:8a:62
Serial Number (int): 326264402033730427626209112802253275695714
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:44:ca:2f:bf:1f:3f:ca:13:53:8f:6f:a6:45:56:2c:87:5d:b0:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:a3:ff:e9:5b:fa:79:60:89:78:44:99:92:f5:90:22:b5:a3:b0:44
Fingerprint (sha256): 26:d3:ab:6e:bc:79:b4:5e:b8:b3:ca:53:cc:75:17:aa:8a:e1:c9:5d:79:05:cb:5a:d2:1f:e9:49:ee:77:72:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pkmc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pkmc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.pkmc.com

Other certificates including the domain name pkmc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.pkmc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326264402033730427626209112802253275695714
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 01:41:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 01:41:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pkmc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 873621428228164416808098584557748597612496256945501040394462604221304637639063531300601499431465364732271481621097243261660581957600507201837908056097458880393385410094948580832148933850867253104469872040003218570545895351969078623604087852138104381096645320003477163862200659309490400954670436654749284099728115165245553079091518875875764982582138137425610077590497157241349031570536191929597484723246499838492903501296257203613540222283299941452453535392503668259308968970182887715578495976068548348982355065265361937717844118709347489168063062926383765835387509752902329682152589161556155014375845951579031300786547084772182535826695606767157014395417750998056409682166728606423955921505680105317345657369257325063936464530988969891948211890922420147757687467764999674348003022639347667402027629066220719986158665599529652719017140994572059413952667720844230005110633214346541262960776376457297792197699044471133037846521764292632790837753934505967568904827573538230971518030377029717388192389925260032763671452034852010860131822726074479776177193129032065624051309868027093188990751186089816556641727522744057547854357526076939409777684570804994549708325810550446880060628052564300212772387082671120894524648335655172093124078117
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3744ca2fbf1f3fca13538f6fa645562c875db009
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pkmc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706078f0520000040300483046022100909f14484b722ff8d8b2e6a147c085b39b05413b0a4885156b1f286ac44f5610022100b278a0f1ffa7de7d64a89ceb4743faa31d1e89c04c04ee428eb1fc69344ca939007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706078f03c0000040300483046022100ef01f224bc2bc3ad226c9bfcea4c3393362bc353b7e3b344bdde7ac0b212ba09022100e0dc23fb94676fc66018a542ddb336e4db947331f0fbc0359f8ae2bba7bf6743
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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