bnkg.app
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:4c:2a:15:91:9e:e7:fc:db:f4:bc:a0:7a:ff:4f:d0:37:e9 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bnkg.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:4c:2a:15:91:9e:e7:fc:db:f4:bc:a0:7a:ff:4f:d0:37:e9Serial Number (int): 287254257248868297793164435420275700414441
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 36:3b:c0:f4:ce:3b:f7:73:76:1a:4c:cc:17:72:ad:77:c6:6e:4f:73
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 74:75:db:5a:90:74:08:16:3b:a8:e9:4e:74:22:44:56:d0:99:cf:6e
Fingerprint (sha256): 4c:69:1d:91:64:06:e8:0a:7a:a6:fa:31:69:85:16:5f:36:25:26:00:e6:5f:a2:c4:c2:c9:b3:e8:66:64:18:09
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bnkg.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bnkg.app
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bnkg.app
www.bnkg.app
www.bnkg.app
Other certificates including the domain name bnkg.app
(limited to 100 certificates)
Certificate
The complete raw certificate details for bnkg.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISA0wqFZGe5/zb9Lygev9P0DfpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYxNTAyMTNaFw0y MDA1MTYxNTAyMTNaMBMxETAPBgNVBAMTCGJua2cuYXBwMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEA2Ukuy35KIxYKfqxhmCU7XcF18aMehKBuyorDoCVc 935LGB9aaysxmYKhtLR5mnNzMN+e5yhdiFzuCDNjjKWm8ZaD/SPhLNkHNxZC6bBS /nFpA/Ns15vvySlYCAkUz4qSrRAzH2Xi1wQEwNOdaFgDi95qMWcgS+y69iPO1WWM ZRtiv08NA52zcZAvztTz3JspQrAfIGFMA9VgThvfr6Q+vSLpA6/n375ksyl/1Kq/ ACLGdmcx77gjnUQOYsTJn7gHfIaWHyWJEXBCuy6c5ov3a7vw+sxZ6Ivcu33TGVSB UOBayQbWzNHH8AugWSA7EBlwU8XrYQR4fXLeuBHZOZJFcTimiytq/f9jeQwW4DpF UYKaPvUlp4FVXbsv3AddRY9sjzRW4DI+1JRDg7/6uCLGE5W53Roj7yxw9kKT0k61 dX76yk/vDCwFqVP8Ny3b700WWwuv1JjmTm8Aiz8z6aPq64Ov8I6MsyIKCurNIpxh vHHAWv7lUB6OxPTSupWHktU62J2k+Yt/w6HYfKc+yFUreMhSKdYTN8SL1KOXmYNx xbLPmYBl/8BhTn5fGxTidERoHArAlB61VqKWLjfXBXsZE17U6M/si8uvihAHLp2t /kEu45i8b2xvHN1UJjwfZTttFMsBr6vRhS7hy+Hl65LPZGB9kOCl8ViIHr2ZMD5P 0n8CAwEAAaOCAmwwggJoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUNjvA9M4793N2 GkzMF3Ktd8ZuT3MwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzAhBgNVHREEGjAYgghibmtnLmFwcIIMd3d3LmJua2cuYXBw MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB 9gSB8wDxAHcA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwTrxh cgAABAMASDBGAiEA0WKaHppjhZhaCwXMVJjod0ytowRNmeOT2Bo0kWVhsuICIQDo LH70CQ9lctGgRDrKkCwANtykyWxGSYqOHHE4j/9LOgB2AAe3XBvlfWj/8bDGHSMV x7rmV3xXlLdq7rxhOhpp06IcAAABcE68YZsAAAQDAEcwRQIhAIKpDPW75w2w9oaA oyqz4fBhESED5oVKCMQpRW+PTPKnAiA7lWdsREXVEhSTtHNIsvx5rh0Az5gI+SZT TfEdwrnS6jANBgkqhkiG9w0BAQsFAAOCAQEAJPT1vWp1otibWfyI6JLCM7PEEEGB h4MxseTfCnNqD0/tgY21/FeL4DIdo5E4L5T1WfFbI5zDk9dBrXqW9JuVrWsy/OQO qmpX2f7hiv5yr3H1+/tklrNChFRkDsfFRvf4+XYzt2WFPfHFwQuXEmnCMvn/KJgb Hcbi/+9G4rS552p1gUZGV44FCZiZhPx8m1EOdJOJl+MW3+HmBFEoZAupRy/EHnjK CCqrsi81FGEHxkF5XCEP2q3Hp/mFpnWWXdSoThbmGvu4tgc5BPYLRSksP/bAlbxu DG5deBtzTKnFyFscHBh4F/AaLjz3VQEHVNEHcIoWjlOdEQZw9hA4+pat5g== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2Ukuy35KIxYKfqxhmCU7 XcF18aMehKBuyorDoCVc935LGB9aaysxmYKhtLR5mnNzMN+e5yhdiFzuCDNjjKWm 8ZaD/SPhLNkHNxZC6bBS/nFpA/Ns15vvySlYCAkUz4qSrRAzH2Xi1wQEwNOdaFgD i95qMWcgS+y69iPO1WWMZRtiv08NA52zcZAvztTz3JspQrAfIGFMA9VgThvfr6Q+ vSLpA6/n375ksyl/1Kq/ACLGdmcx77gjnUQOYsTJn7gHfIaWHyWJEXBCuy6c5ov3 a7vw+sxZ6Ivcu33TGVSBUOBayQbWzNHH8AugWSA7EBlwU8XrYQR4fXLeuBHZOZJF cTimiytq/f9jeQwW4DpFUYKaPvUlp4FVXbsv3AddRY9sjzRW4DI+1JRDg7/6uCLG E5W53Roj7yxw9kKT0k61dX76yk/vDCwFqVP8Ny3b700WWwuv1JjmTm8Aiz8z6aPq 64Ov8I6MsyIKCurNIpxhvHHAWv7lUB6OxPTSupWHktU62J2k+Yt/w6HYfKc+yFUr eMhSKdYTN8SL1KOXmYNxxbLPmYBl/8BhTn5fGxTidERoHArAlB61VqKWLjfXBXsZ E17U6M/si8uvihAHLp2t/kEu45i8b2xvHN1UJjwfZTttFMsBr6vRhS7hy+Hl65LP ZGB9kOCl8ViIHr2ZMD5P0n8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 287254257248868297793164435420275700414441 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 15:02:13 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 15:02:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnkg.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886449011766442500743273068791621642719851929306915377379741371374711039601673618108527592695505683267249021093434030502059327219886373602243366704926365233050331251520471506796237889259077103911040333333310942108582575580107179816073842266503167168234084815666407076682482895290295629149728592820497817497447490469710736582075395811226266425091636098520692910429191755166039262000506600906758265609640489836300100525976761706947353088786215975689355169104063055999360554381004029930814232567798535489127859382304056163030276156378327900947796139530840639719301270516132531857975180360804693576374046283136865849865963591974053480523967570583934916221566457871517636311031218622094431055512939112978180606314091090276590501216947552781941741792559343794009804535801721642385740131995671428934744340144194590121612869963954701174020592844689781815689081480461065661158940697807331063525256045313546961927684197192633661195781210495314273730681245648734240815354282030151487014473894965238428885368807798102330001342376457484273916405947806800948211689703498397441013902514087070337466323664844407398886522410219403405250796133816757546923995758607501066375093236308148656573686904097568717752633538663942119768412889418780534178304639 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 363bc0f4ce3bf773761a4ccc1772ad77c66e4f73 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnkg.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnkg.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704ebc61720000040300483046022100d1629a1e9a6385985a0b05cc5498e8774cada3044d99e393d81a34916561b2e2022100e82c7ef4090f6572d1a0443aca902c0036dca4c96c46498a8e1c71388fff4b3a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704ebc619b000004030047304502210082a90cf5bbe70db0f68680a32ab3e1f061112103e6854a08c429456f8f4cf2a702203b95676c4445d5121493b47348b2fc79ae1d00cf9808f926534df11dc2b9d2ea . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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