kokima.be

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:72:85:59:ed:45:ba:6e:18:04:38:30:bd:48:d1:34:4a was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kokima.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:72:85:59:ed:45:ba:6e:18:04:38:30:bd:48:d1:34:4a
Serial Number (int): 373101698536283330584106974197839870112842
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:83:df:37:09:57:84:f5:73:a9:8a:29:47:34:e8:94:c9:ce:4e:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:2e:ee:46:01:c2:14:22:d2:1b:ea:56:9f:42:c0:b6:e7:5e:2c:77
Fingerprint (sha256): 5b:a7:aa:74:af:17:bd:6a:19:70:c7:1a:b3:93:9a:97:11:7d:7b:ea:cb:29:19:bd:e6:52:70:8b:eb:d6:f0:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kokima.be

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kokima.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kokima.be
kokima.com
www.kokima.be
www.kokima.com

Other certificates including the domain name kokima.be

(limited to 100 certificates)

Certificate

The complete raw certificate details for kokima.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373101698536283330584106974197839870112842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-11 22:18:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-12 22:18:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kokima.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885386299190181719934284184873675650905504574116006479158961347275451961935796760581037726190443636035412581182583513289975215591038698379645623678593701716444166647023840920598479594717824293042501124122831720647403368845390194054880225106658218082270281908334934715896507364277166553558117571490366402020279143782519934999138452295475827635409519891932630572200197327230883667379051522379730791694805847381613163336183614323363807109442980933266580464055912109782591415892398311172950784627341074893999315043702330611029769745792998667107491399603802087459271346758238745254414885967593784757238149868395966560532253380871821484670780512898791327175642657981353594595337707413243030588535791581395053508569559655947008149761320990245805899010215889407699732552939341164380183918964763181330892697975831214725679308751746840487836590143546917306482308492246032339058073121558121870138847228862422396858626813929558976098211997297798379060047120566778207676078749697566945671093730000236218038684928642654458020179953096928259048990139450242611994617268179316963890670167303122250189186335809314062793129618373757622365252035087449194227825660455868449180351301620547119190554040892438174640431756791923321971502065750104734305398871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a683df37095784f573a98a294734e894c9ce4e3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokima.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokima.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kokima.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kokima.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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