ldkit.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:29:57:ac:72:b5:1b:f5:b8:bf:18:05:fd:39:7b:c7:09:c4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ldkit.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:29:57:ac:72:b5:1b:f5:b8:bf:18:05:fd:39:7b:c7:09:c4
Serial Number (int): 362517259008036064645692442744016003860932
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 49:ee:a5:2e:bd:09:81:ab:78:55:64:7e:c9:43:18:9e:a5:7b:cc:59
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:10:6d:01:00:5a:27:c1:02:65:f6:14:1e:e0:c0:61:66:73:e5:7c
Fingerprint (sha256): 3d:9f:01:fe:36:8b:18:d7:66:e9:ec:99:eb:2f:d9:41:bd:82:29:15:d5:ba:70:2d:e9:1e:b6:86:79:6c:14:93

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ldkit.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ldkit.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ldkit.net
www.ldkit.net

Other certificates including the domain name ldkit.net

(limited to 100 certificates)
ldkit.net
ldkit.net
ldkit.net
ldkit.net
ldkit.net
ldkit.net
ldkit.net
ldkit.net
csgo.ldkit.net
adminer.ldkit.net
ldkit.net
srv2.ldkit.net
ldkit.net
ldk.ldkit.net
ldkit.net
mail.ldkit.net
ldkit.net
ldkit.net

Certificate

The complete raw certificate details for ldkit.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 362517259008036064645692442744016003860932
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 16:45:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 16:45:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ldkit.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 878440021863522596902712463743736109278318798607327715850596702897366010383907982205563867889206840509604596496737545624050899575164415125606000975617250834069415348664388006996920799813682987097491862705429511039176747631806338581554394237793600219070410757054871894862039952499925089844711042882526860656376247517447486063966076982866298181215207387730300004766394747588770964043954206394535842370828385776578955368409100810688846223651398255138387376584097990432729057242624649158124472398405164956174382645928387106316639793755387757241455360370727028185724345352769583601751630762413687980703349838370596812022578454231983449839708492119711092252912590979732084172360515272320611376930196136124278738088044673016885715231884503620552674072159937691009967872862606849568414814022553678536565457936176598597010115206852536163981353541713886628903467100043838681675530839614656987571969792864631275249211498509911819049778536926133171439484557445205826854905455034610039111279388904153148593082065930613531616443232361779740787991636978295748591510276630182863493408688901574315595304777872831145404566419438020604944514350907078548661191320875817364546739889556496184762505352785806980562218561348205631751693028635335450457390761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49eea52ebd0981ab7855647ec943189ea57bcc59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ldkit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ldkit.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001662148dd490000040300473045022100ebc3a51585ff523886a2946ab9c5098339a7178c8b83d4a3d3b5fe3b38e2d02b022018e5091b14faf40067cef2f0db470b7b22a0cc60aa1d9b1ca6011354cf2d7af0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001662148dd40000004030046304402206ccbc4fc341dcb1598b6f1bdd49ae2ae6cdea56bcce9aa6fdb1166d0222abc07022027cc69f6e87faf01dbd54b833c9394c35fd9d9899571a5d1f97260b779c2f9b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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