www.kioskmagazine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:44:4f:1f:e6:23:65:61:60:17:9a:4a:18:d7:7f:ac:af:06 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kioskmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:44:4f:1f:e6:23:65:61:60:17:9a:4a:18:d7:7f:ac:af:06
Serial Number (int): 371693519318292995269083439508377440136966
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 02:91:82:d6:73:6a:01:67:31:f6:f5:fc:6f:34:cb:b5:2c:6c:e3:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fc:b7:48:66:88:55:dc:9f:45:ed:c0:56:7c:d9:3c:21:f5:87:14:e8
Fingerprint (sha256): 43:d5:fb:df:91:b4:b7:68:7d:41:ec:b6:c8:23:1b:f0:3f:4c:76:47:d8:b1:d8:c9:e2:ca:a6:eb:8d:5c:39:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kioskmagazine.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kioskmagazine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kioskmagazine.com

Other certificates including the domain name kioskmagazine.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kioskmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3cGvpWM8vZEow5Ax4VPA
LKxyQaRMYAMKW//Dh2HodqBTnJeHh6J2edmzrw+8w38//MBoQSUGN1lLVcxmsaRX
3fHdJhI2nCw6U/HVG8bXPxYo5m88d5a5JJP9ZHH7RF+RyofLjBGt/FckIWxGHQYa
noZahCvk5UBv1d3L9oqrYoLHx4wQVUJW/cKNGfLxzE/Ic+BYxuC9OQCQf9UA9+oY
xG2BtBSqRAVQAztyGWziz5F3g2pBcoqhmDZvEmQmFqnr3rLrvUaiNcOqHEwXLkh1
fp4UkSa90duxNJAx9AXqCqSAT7fPHcVgldELPG8CjdZROPQ8uLZwpO/l3jdXkoTm
1qMn1gxQasrzVg06MiYbVCInjm9lOoHICu8waBIOXBN8D0KiFA7TMDhKN0psLS2P
AXxDiD81+OZcy5b99nmf1XBLvg8B8ktAPBIhcXNpGPXOakguIVy09mPrJO8RO2iD
sSI4TKamrwnA0U7+B19VH8B7mtHkYnyphQDXIkg3rkldFm8o4zQpBhr/Yq6SOOCU
AXOxWYDbg7TtMZEj9xYkr0gMwOOavIfENNulrgcxQuvl9tmuJCwDZiNAL4A1FwoP
nWg6tHDLff0c6/R/3t5gApEK3Ucc5INbuhwPwHugn5ddcx0k9rLnGh9sh61w7j5D
RtNtH5yVnw5xPIL206YfheMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371693519318292995269083439508377440136966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 12:30:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-16 12:30:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kioskmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 904687942234662037632018509274721206899339101117817762389373515197809399091050702147588642803392373921656120742861305966382488545910285565754506974487280123896240837846468928470182381152570403003712755685559060485930097409489699464255269659333074167827910777508871015062358141540579016071376621314167249124521799204474476683149704565676356862630073291598304683061301030795727051631336300846969252535977538074798210490116814245248964837647033613742734902448491076800526809920729774720404605221294984251124835513989358998533630432165288286858682398444198235876258749696282983328453631583542990880679581285933224236406046172918843640736499761935091983057719857010234019901528007089674683912308133833048784771121948751138728784924125421038583301419634814096552353196706480471171428871957646529163483467267089289296989413086250673575848837166774308095768247192732366978312449630304670581771709782350479921730256905345912419103818680102093418513092061554194520088734216980472206970105026114669133385882807866924128170768580616183477076890755871877188323886545216589032904637350560823412147721169623080147723953995193636379364931766822781848724936356568126293831759616059598553641494525520209698189789726567165623933208085987109802073884131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							029182d6736a016731f6f5fc6f34cbb52c6ce3fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kioskmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb3b27c8c0000040300473045022100ae2ae9486966364fdcb6116b0fc378275879618790ae872393807e9742d902e402201fcb435b999f19977a278496e49ee4707d3f8137da5005a18a4cf9fd27d84b420076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fb3b27cf30000040300473045022100cdc3d5bb830f7444816ece862108ac7e89c6c9a4f0fbb0b1ccce6b5ea0cf9c480220317c81a82adb4d3a8db18d1126cd083eb2a837435c3ab0fc686eeecf0da10dc4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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