eck.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ff:a2:d8:4e:c1:b0:2b:c2:c4:f3:9a:ff:3d:08:01:1b:96 was issued on by Let's Encrypt.

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eck.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:a2:d8:4e:c1:b0:2b:c2:c4:f3:9a:ff:3d:08:01:1b:96
Serial Number (int): 435437605360692401379228625759087192251286
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 36:92:00:8b:bd:7c:83:41:39:e0:52:bf:b2:0e:a4:53:e2:93:84:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 26:7b:9e:c9:60:a3:f8:0d:71:4a:cf:48:95:4f:8b:5b:32:cd:38:f2
Fingerprint (sha256): 2c:f5:e0:21:ac:75:a0:f4:38:46:d6:81:23:56:67:4c:82:1c:d9:04:89:f0:d9:18:16:3a:3c:47:42:2f:d9:ea

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eck.io

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eck.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eck.io
lpho.com.br
lpho.de
rod.eck.io
rod.lpho.com.br
rod.lpho.de
rodeck.dev
rodo.lpho.com.br
rodo.lpho.de
rodolpho.ch
rodolpho.coop4.eng.br
rodolpho.dev
rodolpho.onoeck.ch
www.eck.io
www.lpho.com.br
www.lpho.de
www.rodeck.dev
www.rodolpho.ch
www.rodolpho.dev

Other certificates including the domain name eck.io

(limited to 100 certificates)
ikurs.biz
jacob-hudson.com
test.gasuga.com.br
rod.eck.io
eck.io
eck.io
free.update.jp
accordle.com
rodo.lpho.de
www.asalpay.com
eck.io
eck.io
music-lyrics.treisyjimenezvega.com
*.eck.io
www.eck.io
test-tickets.roobixapp.com
ptt.tw-bbs.cc
eck.io
www.loverfighter.app
eck.io
dev.conform.app
www.20191222.love
cameratabellisomi.com.ar
www.everycademy-staging.com
ironview.com
iflex-thailand.solvay.com
gutschan.com
eckhardt.com.br
www.rachsmith.com
jeffshin.com
beta-admin.shl.ist
mattgoodrichapps.com
admin.mojlek.com.pl
www.villaasu.com
www.buddhawisdom.app
avantec.io
naike.pe
souvenir-app.com
coinage.maui.at
wello.in
mail.laplayahostel.com
noteio.tk
app.sundaymorning.co.in
rod.eck.io
eck.io
benjaminlane.co

Certificate

The complete raw certificate details for eck.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0IIBjfCdoxAtuTY91O5
2BAG+Nuike5JcAgh9o/10A+pFxXG1InwZvNbP9bTYASKrgtSftlHX/vRn/7T5b/q
yT8l308B+aPh1p0zIXDgvHmHZjq26SvfqZ20mlt5LzdPdlD/cgGKjNQEm60nTCUq
TVxTf0ODijn1Z33BuctFpJI77LN3ivFA57m4R5BqWHSb8wBSfPoX4a1NjdtnYME+
wANOgUZzBrOzlmiGEchbvJTXkTRXRFt8Bc/HOyKnjt4Jo1U5eUvpDcV7+AxinfCQ
J3Fc82XlST8iC8adJedjp6ZWHI1T1JBm6qlzRK1YejDT5N08eKz6uO/qzelPKovz
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435437605360692401379228625759087192251286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-07 20:32:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 20:32:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eck.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24144077518250826387989106502066850622192084434038652529283899995591159884064887020656593561838080402219157048440211108278482976385924313315377218370930860076434026983341515996330857264276534006833328014578714748469037000011996761654981955359546996242324856277826963184692943625489790874454920763731987197450582214852065779202133675599869200401757920109760528556318513739878271002038849324966331926151778098077912260899644687987247098353210416525106144697040866279774700468368502522353890450396010454196568622803670768579373212597611894317604870298915213561197425916173655200998509939713149768145959835448498853770089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3692008bbd7c834139e052bfb20ea453e29384fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (283 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lpho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rod.eck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rod.lpho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rod.lpho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodeck.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodo.lpho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodo.lpho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodolpho.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodolpho.coop4.eng.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodolpho.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rodolpho.onoeck.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eck.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpho.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lpho.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rodeck.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rodolpho.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rodolpho.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee24700f70000040300473045022100a74c91564e8db4f875320e26af1a614448c303d04606bff62690c3185aa4097e022013ce681a11884ebd081a7d3a6ce79a8692866cd5cb680e874697813226b0c2470075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ee24701f300000403004630440220775aafa232dd505873ce038a4f8217216cdf71130f390e64fdfdf47b977898400220181be81d7d7bf6704a3e0fe44e2b0abc41b78f524b8b091d21c3b682194c0665
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00347362d645e35cfb43a0884ee3d5fd106af2c48593ea65040bf8c8da4987b5c5770eb9c8d3e1ce2551383b25fdb3f6ef9e68d0a9a5f06f2aa2f6bf032fea91e29e84d4b4dfaab08ba0735f5e605a086fc971abc604d3572d40c07a29224afcc8478a8209a91ae5fb3021d62d1072214b27ddd7086b4d12e4aa77eb518807ead03072360be140da91d4800f91f3d6020105749d11ecdfd8ee506d875a7547fc56f36a12252b3d2342aaf9e9bb48ebe9da13562d0c417ef84f8687e128536b5145615def6b1a1c6f895990e568fd9969fb85dd60233e01f7d4fe5f98b10461f2f84b6454bb04e228237350c08495ef30d627e1f3c9724e4f2192e8ec3058c64506