roulette.ke

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:92:7a:0b:ad:d2:4a:b1:49:71:da:7d:76:4c:c8:35:4c:f9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=roulette.ke

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:92:7a:0b:ad:d2:4a:b1:49:71:da:7d:76:4c:c8:35:4c:f9
Serial Number (int): 398292595753767097648910793753708675288313
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:70:bd:13:44:eb:c9:b4:00:7a:db:eb:9e:74:40:5a:c0:07:93:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f4:82:a8:ae:ae:5e:72:74:a0:d9:74:41:ca:ea:1d:ac:fe:4a:c0:24
Fingerprint (sha256): 38:18:a2:39:aa:64:7a:3f:b0:31:b8:df:27:97:ac:45:a7:49:83:09:40:ba:a3:59:b4:0c:b5:6a:9d:90:1f:ef

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate roulette.ke

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for roulette.ke

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

roulette.ke
www.roulette.ke

Other certificates including the domain name roulette.ke

(limited to 100 certificates)

Certificate

The complete raw certificate details for roulette.ke in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398292595753767097648910793753708675288313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 22:20:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 22:20:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'roulette.ke'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 796562876903001534484501688498375736725649665638605049158041209006301091588779864082403571518208715861974294260469514636809068690604697097422610348648474867400903420656013585737685671531981206446254766091451616244127036496072505116598020636863363480559824886813423305107578071907864370558772887438312225177583820943399250122323816036079877657830442448040705805570614058165957377792363811014004479593645487070779679020273373752617749525112375505789566558768811700906526182004128790378237351902747571755899393756143017687787892711663354405286252458710543263999186192694560914568233784144654521803528069507494021330434102361872905793785407711446598798411382704685418440063858760871276379879445759998178733189500607754596717142973513822811742951321431781195233067083791437917908879171261693410468218398992395007405230018612089768649147229082652860316366404489197638494787756982442874890413478108712617484035592263913108676781226118034889475635171000923158713991364571237451085488351328881473147444149119661976137480740804569941918095811278245104461724904034950953602264960729744425788067143777539298749601777586492513435725348132428284828508912430902219127532419522426638482845581670427337562286988529101614924465113277777213497693107701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9470bd1344ebc9b4007adbeb9e74405ac00793f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roulette.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roulette.ke'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000017083cdae3e000004030046304402202caa1b0777dc96a079abacb0a0a1fef6b52eb83e05b7a8e3d8a1a77ad20278f40220361491f08615a675f4e1faf5f9542fdfacbc08c610e902f427e87870c0201e12007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017083cdae2700000403004830460221009723fc78b96d2977f900c2757561ff8c85818ed6415fe72282c435d5296922d6022100bd65fdd5521b597a3535b4b60ed40e4b454a088eb42e00b3d89b19d6ac4d3c79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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