kissiae.com
Issued by R3
About this certificate
This digital certificate with serial number 03:2b:59:64:5b:fb:cf:e4:cb:ef:8e:ba:85:a8:c3:68:40:91 was issued on by Let's Encrypt.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=kissiae.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:2b:59:64:5b:fb:cf:e4:cb:ef:8e:ba:85:a8:c3:68:40:91Serial Number (int): 276087821959841687582809798920832647970961
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 76:71:49:5e:b5:23:1e:6f:14:b0:2b:21:3a:1d:38:19:27:5a:ad:f5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 4a:e8:93:7f:2c:10:37:50:1b:3c:b0:24:cf:6d:0e:f4:16:28:b4:19
Fingerprint (sha256): 3a:e9:0b:4f:d8:b4:c3:57:c2:c3:8d:ed:26:1b:41:2f:5b:b7:98:86:7a:4c:aa:e7:4f:9f:86:dc:73:5b:33:b9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate kissiae.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kissiae.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
autodiscover.kissiae.com
kissiae.com
www.kissiae.com
kissiae.com
www.kissiae.com
Other certificates including the domain name kissiae.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for kissiae.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISAytZZFv7z+TL7466hajDaECRMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDA0MTUyMTA0MzRaFw0yNDA3MTQyMTA0MzNaMBYxFDASBgNVBAMT C2tpc3NpYWUuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAi3qf k6mIhHIixXcdimgp3IC2U/M0Ez9NQkDRPxs6loeC4jXw0ZpfpzxJGUkxOUnxE62b Lc84W23ECsP12Exo91tqpekxmPq6eM2TaGxNk6ZldEPSlJQwNM32fT4rMh03RGup 7mI4PKKGZjZvNSOiVT/jYmwKTtAR9u9W+nZdypMnx4iglEV+d/kiKXflKBRWhPVj VDSCcUsC3G10nrqdgLM0j72sUvnmwL6d+VAzQJykMoaNaCC0TkVHpao3fYzE1Rd+ LIluMJU8cdnkLrwwXwJInNLWKPyRLLZvgrfLMLUc/EKums6kNbgf037aL+HLOTJH +BwRkG3LgJSxGJXFbI1k1/SstaCzvOIycxJT2N9iDLpfQv1zjTS/9orxnO4ngS/L vboADTFYyI3e5Jwx/GCw45c/Usm1utHw7CYX2eLX5NyyLCpv1ub2MyAKLPQnUUcM N8bNNmgKTc5kh17/3gOw8ZwI5D8G7iNBbmHjqmd92xSlCj5HkG/wa3jepOY5+fsH CKTRm+LKf9Iu4sJBQf+M2P5bnQGSPeeL7ec+zhzByTNXJ5u/DLLqCB+NBbErUg29 bgSe0++sjxbiWqtYgGxLgoj/iBZuo0XqKnh7sV2vZWNyeepGGdwnl0H8RpNgEcjJ gAiQiAQYHWSMgCRFOQv+bSTBg6bl0RnLf8CpDIcCAwEAAaOCAjgwggI0MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUdnFJXrUjHm8UsCshOh04GSdarfUwHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wQQYDVR0RBDowOIIYYXV0b2Rpc2NvdmVyLmtpc3NpYWUu Y29tggtraXNzaWFlLmNvbYIPd3d3Lmtpc3NpYWUuY29tMBMGA1UdIAQMMAowCAYG Z4EMAQIBMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYASLDja9qmRzQP5WoC+p0w 6xxSActW3SyB2bu/qznYhHMAAAGO48peOQAABAMARzBFAiEAwSSL3wlaC3fuFSlB TgwHRrZoUAginl2ujb53zs9FhPUCIBXnKcz8BL8rO5EmtoXSYAgZw/Sj6ilP8adp 8lQhyN0oAHYAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcAAAGO48pe PgAABAMARzBFAiBrY+XovS9aSvxHChBSj5sCOcCwmiZWf3SKrVX7eL5qKgIhAJxw CwrIFKVDizO27H1D9+5Y80EfsJOMSDQZdfHfmaZOMA0GCSqGSIb3DQEBCwUAA4IB AQBpuaVSFxz8k9df5RAZGlecvdZtKWsyqy3lUqXlEZ4ysDV9x20yzYiZKdxxzslI ZE7cyKE6bm2YVBia3SEKlzpRlAwEDnVp42Flis3o5aI34gPy5BfEOXBmctOf8pOH z2Wp3FGVpfSxwBtCQgEKM3xUPfxDn93RmIjtKTFWjkoscvxW8EzQmwytDPDZkWK/ nX3oCGuZWN60NhGoc9osJnHPKl/vbteWxEieD2n31pZYJ3C4dsaVb+bFAaGjswS0 LOedqJ4YW6NOV0XGVxT0jC5l+mnu+3dt5GC3rvCMNMrXrl54NBnfoTHAre6RZwLM hW80Wp4nQeIXzaDtNNMoGXHt -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAi3qfk6mIhHIixXcdimgp 3IC2U/M0Ez9NQkDRPxs6loeC4jXw0ZpfpzxJGUkxOUnxE62bLc84W23ECsP12Exo 91tqpekxmPq6eM2TaGxNk6ZldEPSlJQwNM32fT4rMh03RGup7mI4PKKGZjZvNSOi VT/jYmwKTtAR9u9W+nZdypMnx4iglEV+d/kiKXflKBRWhPVjVDSCcUsC3G10nrqd gLM0j72sUvnmwL6d+VAzQJykMoaNaCC0TkVHpao3fYzE1Rd+LIluMJU8cdnkLrww XwJInNLWKPyRLLZvgrfLMLUc/EKums6kNbgf037aL+HLOTJH+BwRkG3LgJSxGJXF bI1k1/SstaCzvOIycxJT2N9iDLpfQv1zjTS/9orxnO4ngS/LvboADTFYyI3e5Jwx /GCw45c/Usm1utHw7CYX2eLX5NyyLCpv1ub2MyAKLPQnUUcMN8bNNmgKTc5kh17/ 3gOw8ZwI5D8G7iNBbmHjqmd92xSlCj5HkG/wa3jepOY5+fsHCKTRm+LKf9Iu4sJB Qf+M2P5bnQGSPeeL7ec+zhzByTNXJ5u/DLLqCB+NBbErUg29bgSe0++sjxbiWqtY gGxLgoj/iBZuo0XqKnh7sV2vZWNyeepGGdwnl0H8RpNgEcjJgAiQiAQYHWSMgCRF OQv+bSTBg6bl0RnLf8CpDIcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276087821959841687582809798920832647970961 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 21:04:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-14 21:04:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kissiae.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 569024664555457679953047766596224234582091849174222186538953994810992085441351199203673276932022347374906769739688361954457922527069926031906180265193528034081399453976297128254346342385916694629730604622392798393927678903492404291038170829868265809628625039695062244569078926609440863879039447889587650347201841808652164450064536192510115153612086359519624162166122346236163068586566562702310104079997737786136843819656228488197496647419176400115063151432440394384976972161318228954353203387654107611736988410139093423687536535935893479718377657918253632954134380755938765119176308918867618301329639261618903803691497244380048861462641126192963205190391848157708112815823190655354309890309648531254536125648508130071270529711506444145255831855751138748143412440373916885926848535506707876733507667864605509520305093490712153811254128638443078037973442404838124648284367809111154613662304048897016175380328855926426445708563040986896717490902962073110698871608389491690884719549592152574371592122748966019184086138730272779296792562615640957599576234824887873224896429137187493930127971544650007527029244549893476831936118402427486563178776846401247119605265830922835486401469052549268092875401990412198728008422084861979842572782727 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7671495eb5231e6f14b02b213a1d3819275aadf5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.kissiae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kissiae.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kissiae.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee3ca5e390000040300473045022100c1248bdf095a0b77ee1529414e0c0746b6685008229e5dae8dbe77cecf4584f5022015e729ccfc04bf2b3b9126b685d2600819c3f4a3ea294ff1a769f25421c8dd280076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ee3ca5e3e000004030047304502206b63e5e8bd2f5a4afc470a10528f9b0239c0b09a26567f748aad55fb78be6a2a0221009c700b0ac814a5438b33b6ec7d43f7ee58f3411fb0938c48341975f1df99a64e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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