katfiji.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c1:ff:e9:a9:4f:9e:f3:83:e1:2e:1a:54:26:51:8a:9a:dc was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=katfiji.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c1:ff:e9:a9:4f:9e:f3:83:e1:2e:1a:54:26:51:8a:9a:dc
Serial Number (int): 414463806920910743076423787575908382710492
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:39:f4:2d:44:57:c1:bb:d6:76:07:87:87:b9:79:81:3f:1e:6d:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a9:24:4b:16:64:9f:2f:eb:04:36:8c:3b:47:f9:45:7f:c1:da:1a:0a
Fingerprint (sha256): 28:8d:b3:f3:26:ac:16:79:aa:b8:b1:72:9b:f8:5c:cb:22:6f:02:93:ad:fd:8d:10:b6:6b:cd:39:f1:f5:28:fa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate katfiji.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for katfiji.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashiyanafiji.com
ashiyanafiji.tech360fiji.com
curryhousefiji.com
curryhousefiji.tech360fiji.com
katfiji.com
katfiji.tech360fiji.com
mail.ashiyanafiji.com
mail.curryhousefiji.com
mail.katfiji.com
mail.mesuriatravels.com
mesuriatravels.com
mesuriatravels.tech360fiji.com
www.ashiyanafiji.com
www.ashiyanafiji.tech360fiji.com
www.curryhousefiji.com
www.curryhousefiji.tech360fiji.com
www.katfiji.com
www.katfiji.tech360fiji.com
www.mesuriatravels.com
www.mesuriatravels.tech360fiji.com

Other certificates including the domain name katfiji.com

(limited to 100 certificates)
katfiji.com
katfiji.com
katfiji.com
mail.360events.com.fj
katfiji.com
paylessshoesfiji.com
tech360fiji.com
katfiji.com
katfiji.com
360financials.com.fj
www.tech360fiji.com
360financials.com.fj
cpcalendars.katfiji.com

Certificate

The complete raw certificate details for katfiji.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K3l1O4u4ciSOUy77BAB
iDfTrCyt/ouy7h9h94eRXploum1U3A1/F38tiNABY0wxPOQ723+mEvwPN2pKBQlW
28xs/l4tHK7bCT/1P2w2OUxNsg0J1BcAgNnkBB8szqmR1g9bzlzhnysCt4YgfR8Z
q1J4u6Iqmk9ehBbYTl1wbaSZG4XLy6DARcM+lp94Yr/Fo/UYAMO0XpMwHlqSrnO/
tdPc/+byH6jGBhtS76R7yUEh0JAMkZ4dAoMmr0FcPbqOJotKsz6fk6PeUQ0CjSOg
7eT5knOK8Ch2acLBikrdaoVWwktK0nZN9JTmDTJmGJqknd9ju3hxu+vyWf8exzQQ
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414463806920910743076423787575908382710492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 06:49:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 06:49:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'katfiji.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27858179284031753750872074866524468199877036360690275253996545829116784705585964607707750680830118572019284933343628444124429391962629479004674010651956188220215281185444327155661171322574848241073328650917760834493589005554274826715088152004699719346144699698741838264137468786677305112537635340933169421439905989748553019602940439301450268710125771622546592661632526740924517670358873843669970181497992035342682813283512993182311817967517161570283307877945639480343478852494254483012948243410228915934250286001195164504171704305868610780385260949525651558701512462782337821809953693301504264439629026120950405664837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2239f42d4457c1bbd676078787b979813f1e6de4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (507 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashiyanafiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashiyanafiji.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curryhousefiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curryhousefiji.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katfiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katfiji.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ashiyanafiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.curryhousefiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.katfiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mesuriatravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesuriatravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesuriatravels.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashiyanafiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashiyanafiji.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curryhousefiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curryhousefiji.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katfiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katfiji.tech360fiji.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesuriatravels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesuriatravels.tech360fiji.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016f8421946c0000040300483046022100f15f7baefd3236945d7b44168981a0dda1b3ff53a7412acbfe8717c5208e34e0022100f2064575244884791439277f5ea30b02a463e56f826620c6814a013733c40a4900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f8421946e000004030046304402200992b2761ab93a09e3aee422812f92a931a1e6b4ad9c4f33ddab69a4bab4d9060220042e800e1a8ba1c6033e6f7503794671c7e28eaa5d2eefeb343342060e71339f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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