nota.lukhnos.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:b8:02:73:3f:30:fa:33:8c:c6:8e:0e:c6:0e:c0:7a:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nota.lukhnos.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:b8:02:73:3f:30:fa:33:8c:c6:8e:0e:c6:0e:c0:7a:d0
Serial Number (int): 336783851558109918369251666739003895347920
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:86:c1:28:7b:9f:7e:4f:bc:41:09:4f:17:67:73:eb:a6:9a:9b:b8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 58:81:d9:18:2a:e0:7b:99:e8:6c:3f:83:61:9d:08:19:20:ee:79:fe
Fingerprint (sha256): 46:aa:57:77:2d:d9:e3:ba:a7:2e:c0:4a:44:b7:d0:60:6f:b3:69:c9:b4:ca:4a:9e:46:e1:67:57:2f:ab:70:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate nota.lukhnos.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nota.lukhnos.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nota.lukhnos.org

Other certificates including the domain name lukhnos.org

(limited to 100 certificates)
roundandsplit.lukhnos.org
lukhnos.org
blog.lukhnos.org
lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
lukhnos.org
nota.lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
nota.lukhnos.org
nota.lukhnos.org
lukhnos.org
kumo.lukhnos.org
lukhnos.org
nota.lukhnos.org
lukhnos.org
kumo.lukhnos.org
blog.lukhnos.org
roundandsplit.lukhnos.org
blog.lukhnos.org
nota.lukhnos.org
lukhnos.org
blog.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
blog.lukhnos.org
exhibitionist.lukhnos.org
blog.lukhnos.org
nota.lukhnos.org
lukhnos.org
blog.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
nota.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
roundandsplit.lukhnos.org
practice-1.lukhnos.org
nota.lukhnos.org
*.lukhnos.org
lukhnos.org
nota.lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
blog.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
lukhnos.org
*.lukhnos.org
nota.lukhnos.org
nota.lukhnos.org
nota.lukhnos.org
lukhnos.org
kumostats.lukhnos.org
blog.lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
blog.lukhnos.org
lukhnos.org
roundandsplit.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
nota.lukhnos.org
kumo.lukhnos.org
exhibitionist.lukhnos.org
blog.lukhnos.org
lukhnos.org
lukhnos.org
nota.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
exhibitionist.lukhnos.org
lukhnos.org
blog.lukhnos.org
lukhnos.org
lukhnos.org
blog.lukhnos.org
blog.lukhnos.org
nota.lukhnos.org
blog.lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org
roundandsplit.lukhnos.org
lukhnos.org

Certificate

The complete raw certificate details for nota.lukhnos.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KSdLLfCskxva1tipCy7
mP181CyHeKlgo+OiA8BiMmO5eb1Hh6K/S6fevgrRH+U1wt85S+7dv/+dCKQherEG
bNxLavnln67MqH7dClDXk3jOwAEFqezg7OHOzjgQGCDGAHE/jZuRJZHR8zcdtLEa
PVFJgHXmY+5sPtyfwH+KbtuqxGcJqC1SMt1RwQJq1jQwL0wTVamuSwsAuVLzLW5U
RNrv6mwTIU9vm+turAwf2Vsv/MGJVcxNWJqjrfCf5hCv2ckZD2+0GIz+f/dc6cUp
FDt7G1wG2oYEPIChvf9Yv2l2mggCQWLSDkX/QkW0wmyHnifsQwR3oWRN3owoZ/te
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336783851558109918369251666739003895347920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 11:23:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 11:23:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nota.lukhnos.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29368460922974460620568292095882886791582235675862503153829682057764440266918591641630231347089299131099865235420609563882580360286170249790838459925864163096083993066129015052631553605673569798269195697515967939364971146766128527651307834163004068199725649314705853317906351193200536912836070520726859907374369725489245128258580371408667640928030866821303249115599612478136603585607769418398136017143973098089714942344844155226811516249662307493972656084171667647328788822699826009167981367874533201718097917118093521478168220837432403221645019034076120941755508193108380568301763197680456168081487891688805937929761
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b386c1287b9f7e4fbc41094f176773eba69a9bb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nota.lukhnos.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c23ef98960000040300473045022100bea2c1590a7eb8274bf146636f834e6d9b71c051ed7b0148bb86a912f73281200220050250e5deeaebba23bd6d4cd38ad000d5df5320a8f3e293a57688fbcba6cea0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c23ef98b10000040300463044022035ca3011d3df2a4164fc5340fa55f75648dde0a36f4a63c18d9e056167fea9ee0220520dd481574f88025737dfc62b893cb78e64592209ca989dcbf4cca253398abd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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