skbs.kz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:89:c4:a0:7a:d1:89:dd:ac:ca:b2:55:3d:53:3a:6b:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=skbs.kz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:89:c4:a0:7a:d1:89:dd:ac:ca:b2:55:3d:53:3a:6b:e6
Serial Number (int): 283978619192585706276985340009299633138662
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:97:9a:25:05:dd:72:e5:a6:2e:bf:aa:51:8a:67:40:25:aa:cd:c6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:a7:ac:c8:48:34:99:3f:dd:fa:08:b8:66:2a:06:e1:f0:be:b8:c8
Fingerprint (sha256): 30:21:f4:39:a8:5d:eb:48:c4:a9:56:f0:bb:43:f8:ec:f5:49:5d:09:12:59:0a:b2:8d:b6:26:14:c9:3a:e6:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate skbs.kz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for skbs.kz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

skbs.kz
www.skbs.kz

Other certificates including the domain name skbs.kz

(limited to 100 certificates)

Certificate

The complete raw certificate details for skbs.kz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgISA0KJxKB60YndrMqyVT1TOmvmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA2MDIyMDI0MjRaFw0x
OTA4MzEyMDI0MjRaMBIxEDAOBgNVBAMTB3NrYnMua3owggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQC30ZGfc597Eq/u8YXMeqWqbi4uGYnwOPjqGo2hn5YO
GXlsKVjiuRqfifE9HbcETHi2Xo8HKOZKH6HgYOfoCidw/Ms22yxb5ENk+xfU2zVT
6Jdpjkx6jjjaULfaj6cJyjfZm2Sig/Pax+2zt6b8EE4hUYJg2UwTbeL7XdcQIEo7
z2Dok+FH92YR3fkWpLju9WCL1eunRn/o4OOCzQFB71C+CMqbiQ82q+POI0bpBrIG
c29kODRCb8jBW+NjAyeyQSTGu6m57+qpzRmxNkEvOGaV4TH7ZT9F/b8FEEHvea2g
M4BgMxHfxAMiFL9vjwAof1eKEzlGLUBhE+4jyFCqa0aFMyC+uP01b1iJSi7Eo9nU
rweyM8oNzNJ/Ev3mJ1XDbt18IBHSiQ31im4MIa/GZjFpl5vLs9olCCTjyldGN7j6
Y59V4k4bVUSmausOBRYco0G2Cs3d4BeBl6ittzq6mTp9kXSiUWn7Ucl4VRTvsVLo
khd3Nn5AJtOsi6icZBx1wT8cpFfTq1ZaOmA6k64FmT3Y4oSOcF65oSrdZJ4Xaitt
Yg0Qdcnn/nJvzbCqJoDtLU+pbJVDUP61W1PDx9oA2bILF32mMOSO9W20ccrgqkXx
wbmV4rb6wxwL33B5avZFT6L5yOdBWWcZ60488mNIQ1AyQqvjtWY17OKY8gNX/jn7
AwIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTll5olBd1y5aYu
v6pRimdAJarNxjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMB8GA1UdEQQYMBaCB3NrYnMua3qCC3d3dy5za2JzLmt6MEwG
A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB
8wDxAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFrGhRDpQAA
BAMARzBFAiBIGTnNccZ6FQSvM1wrpcv5yjFwfrO7XLIuC61ztOeLwAIhAI5MuGd+
f8MVI3AyJGnfaOh/QENhMKynWFbh5xmGWMDZAHcAY/Lbzeg7zCzPC3KEJ1drM6SN
YXePvXWmOLHHaFRL2I0AAAFrGhRDoQAABAMASDBGAiEA1f5d8fYxR5occqfOVcEe
SbSTzwYzeRTUyN7vDIXOYrkCIQDGy0Xs8bIzkgBDTBGgnjJXdRriamqZ0advUNXh
WrkAnjANBgkqhkiG9w0BAQsFAAOCAQEAO+hEQhkG7aYE2Hj+Z2Pk7gPPPxKCxfg/
q25po2CPEw2ytOAHvx3uh391y6XAOi2Btx5liMkw4b1m1OyiWdV1QNQKn2XISkJO
Ns+Jh4lKexjt47zW8NeusBhHS7ZJ+YmVpkax21e3OBPUfcf91M3G05Nh1b/wmeDq
aM7CozPCF37jpJZGVb0hJVEwG6pEWRxztfWXBJGWQ1G9jkSsJA5BKCMpBvTxdOKH
6odx5Wq3AS5Z1sHmbmQ2ySmt8vFmLOO8PeKDFpa2wQkK/mr+A7tfTNxhF1kp+H6T
+KI0af44NXuWm/bpO2LVLn8xe8CdSkOhYnHjvLQTTokUtBS/NflXLw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt9GRn3OfexKv7vGFzHql
qm4uLhmJ8Dj46hqNoZ+WDhl5bClY4rkan4nxPR23BEx4tl6PByjmSh+h4GDn6Aon
cPzLNtssW+RDZPsX1Ns1U+iXaY5Meo442lC32o+nCco32ZtkooPz2sfts7em/BBO
IVGCYNlME23i+13XECBKO89g6JPhR/dmEd35FqS47vVgi9Xrp0Z/6ODjgs0BQe9Q
vgjKm4kPNqvjziNG6QayBnNvZDg0Qm/IwVvjYwMnskEkxrupue/qqc0ZsTZBLzhm
leEx+2U/Rf2/BRBB73mtoDOAYDMR38QDIhS/b48AKH9XihM5Ri1AYRPuI8hQqmtG
hTMgvrj9NW9YiUouxKPZ1K8HsjPKDczSfxL95idVw27dfCAR0okN9YpuDCGvxmYx
aZeby7PaJQgk48pXRje4+mOfVeJOG1VEpmrrDgUWHKNBtgrN3eAXgZeorbc6upk6
fZF0olFp+1HJeFUU77FS6JIXdzZ+QCbTrIuonGQcdcE/HKRX06tWWjpgOpOuBZk9
2OKEjnBeuaEq3WSeF2orbWINEHXJ5/5yb82wqiaA7S1PqWyVQ1D+tVtTw8faANmy
Cxd9pjDkjvVttHHK4KpF8cG5leK2+sMcC99weWr2RU+i+cjnQVlnGetOPPJjSENQ
MkKr47VmNezimPIDV/45+wMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283978619192585706276985340009299633138662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-02 20:24:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 20:24:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'skbs.kz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 749914576447869763262295006484794909955460371124222457879569104806691826726284498151928179422503073654770374127103264581364998288261321677198538667360879224568718121983237930376869220443508258374862041393009809117885908719025995627645506162407786823194452189942541397383321837031870467781766904542875948549409022443215109468311965497679228671595858597780763148046774177707991440371470929557159636394717342979508026219352398071553204554805043608946179924004504128644130292741477152622637480055681968498134937631988125126095983670248518109467618545180508934495727577774948857768704483124407029310981594716957385130074344655245496239707693819874400109780685563959617929836986286458868334530315250551111330668891614340707045849680986555067527394388855722962197727032438659504425513270878515846925295270294770537553636888378016581671596426521560577027589327628424539843896353358752317290448556465710238722935626995521660212568730226316888290879193739164177086270051834664224896759688675231362944346095289001983517432602059638050127060235834363457999173362412124160237772253270167198930534953797552246025864990182881542361728895405168164227402768009308598923174568681794367023651006025596908151236398878912367448675166223410235568914299651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5979a2505dd72e5a62ebfaa518a674025aacdc6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skbs.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skbs.kz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b1a1443a500000403004730450220481939cd71c67a1504af335c2ba5cbf9ca31707eb3bb5cb22e0bad73b4e78bc00221008e4cb8677e7fc3152370322469df68e87f40436130aca75856e1e7198658c0d900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b1a1443a10000040300483046022100d5fe5df1f631479a1c72a7ce55c11e49b493cf06337914d4c8deef0c85ce62b9022100c6cb45ecf1b2339200434c11a09e3257751ae26a6a99d1a76f50d5e15ab9009e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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