bnkg.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:2a:15:91:9e:e7:fc:db:f4:bc:a0:7a:ff:4f:d0:37:e9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bnkg.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:2a:15:91:9e:e7:fc:db:f4:bc:a0:7a:ff:4f:d0:37:e9
Serial Number (int): 287254257248868297793164435420275700414441
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 36:3b:c0:f4:ce:3b:f7:73:76:1a:4c:cc:17:72:ad:77:c6:6e:4f:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:75:db:5a:90:74:08:16:3b:a8:e9:4e:74:22:44:56:d0:99:cf:6e
Fingerprint (sha256): 4c:69:1d:91:64:06:e8:0a:7a:a6:fa:31:69:85:16:5f:36:25:26:00:e6:5f:a2:c4:c2:c9:b3:e8:66:64:18:09

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bnkg.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnkg.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnkg.app
www.bnkg.app

Other certificates including the domain name bnkg.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for bnkg.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287254257248868297793164435420275700414441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 15:02:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 15:02:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnkg.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886449011766442500743273068791621642719851929306915377379741371374711039601673618108527592695505683267249021093434030502059327219886373602243366704926365233050331251520471506796237889259077103911040333333310942108582575580107179816073842266503167168234084815666407076682482895290295629149728592820497817497447490469710736582075395811226266425091636098520692910429191755166039262000506600906758265609640489836300100525976761706947353088786215975689355169104063055999360554381004029930814232567798535489127859382304056163030276156378327900947796139530840639719301270516132531857975180360804693576374046283136865849865963591974053480523967570583934916221566457871517636311031218622094431055512939112978180606314091090276590501216947552781941741792559343794009804535801721642385740131995671428934744340144194590121612869963954701174020592844689781815689081480461065661158940697807331063525256045313546961927684197192633661195781210495314273730681245648734240815354282030151487014473894965238428885368807798102330001342376457484273916405947806800948211689703498397441013902514087070337466323664844407398886522410219403405250796133816757546923995758607501066375093236308148656573686904097568717752633538663942119768412889418780534178304639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							363bc0f4ce3bf773761a4ccc1772ad77c66e4f73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkg.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnkg.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704ebc61720000040300483046022100d1629a1e9a6385985a0b05cc5498e8774cada3044d99e393d81a34916561b2e2022100e82c7ef4090f6572d1a0443aca902c0036dca4c96c46498a8e1c71388fff4b3a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704ebc619b000004030047304502210082a90cf5bbe70db0f68680a32ab3e1f061112103e6854a08c429456f8f4cf2a702203b95676c4445d5121493b47348b2fc79ae1d00cf9808f926534df11dc2b9d2ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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