www.tokenzz.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:f2:ee:b8:f9:b6:8c:4d:cc:68:4c:01:7f:6f:43:80:e2:56 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.tokenzz.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f2:ee:b8:f9:b6:8c:4d:cc:68:4c:01:7f:6f:43:80:e2:56Serial Number (int): 344002507300549567324854953526526809793110
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 51:f6:13:1b:b2:97:c3:27:b5:49:76:f9:06:85:01:ad:ef:7b:4c:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 72:f1:48:7c:18:d9:46:c8:de:fe:4e:04:9e:b8:1e:a5:e7:43:db:d7
Fingerprint (sha256): 5b:ca:af:11:48:bf:37:8b:e0:e4:83:54:ae:81:5d:4e:6f:af:eb:1f:28:27:b4:25:1a:f2:06:44:93:87:e9:80
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.tokenzz.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.tokenzz.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.tokenzz.com
Other certificates including the domain name tokenzz.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.tokenzz.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgISA/LuuPm2jE3MaEwBf29DgOJWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDEyMDU0NTdaFw0y MDA1MzAyMDU0NTdaMBoxGDAWBgNVBAMTD3d3dy50b2tlbnp6LmNvbTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALXER25SbFYKg1jMZUnHAZNUmUZLT/pY Ua9k4s/ol65JK12xdij1HYB1ymR+z2CxQbp4DSJsbu1xlNftkCJS7i23ql/mM8dy sA+H+kSpGY5YqsrG2r4IQciXQrdoIjnyp48eiCWx8VbcE55Qa6Oip0HUoYhzG1K3 zlSVFAtlnb4Q8ZUpw83Jn8ppw+yIXJVrXm1lXS9SE2fXpe8LwyReIoNKaT9ga6IY mboZf9dNZlO7ixKjSKngeTOv9eW/hMrA66ydbS7E6d5DRKfjrTsxJipCA+ZT3i7c p1ixerP0PHGsgfodaVUY7Q+KyqtBIRUC5YTcLza+b2QOX7Ad4LNcenX8J3/p2nK/ /LAzBGvzcrWASqmvb/5KJvT22sM0+4G4nbcGASn6ANNRwMMW85J4ont5uCZ9yYjM ta0IZUg4O3bM0rFvfnsfYxPCMfZoLWbNaudKX/e03ZRPKEsH1IRx0WD9tLfKObyX PTM2+DEmsCVigugAHbgKyET1babfqvUpLTFWOb/CUWGyAlJCPi/peieFsnn1D/zQ iQ5mMzwgcFsacg7Jf4woDQV7B81fYbjur7YprYQSxJJYoFVOfYLFzAtblGCR4TMr y64KGrB0145xNwCMnutZq/GjMOQ7dDQ7e1/YttXzjlSwF8Zf+CJG7UkpCKB9LegP LYXVRuHli69PAgMBAAGjggJiMIICXjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFH2 Exuyl8MntUl2+QaFAa3ve0yNMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LnRva2VuenouY29t MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB 8wSB8ADuAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwmBhb WQAABAMARjBEAiBTE14/45zow7oRwrLoTZxdZY6w479jWH+B78kNoYkvfwIgfyZ1 z16Y454ljjsaDHCwR/bnUP9obRKI8j5vIfmAq2YAdQCyHgXMi6LNiiBOh2b5K7mK JSBna9r6cOeySVMt74uQXgAAAXCYGFtNAAAEAwBGMEQCIEezmj3SbWnE5Q+pAsYu YY1e6XjOqC2BJE4rHevWGOdlAiBZSrbvKR43m3fFAfGWYeHsmkYX7pIaq8lxtcLx Xes5xTANBgkqhkiG9w0BAQsFAAOCAQEANwjoFgWKVYCKeKdS7vASA2YHyVx4+tbr CaP52Oca2n5uVqANTkglr0r5Q+G5uQasApGv1CLD2xbAl3inODdjYJWYdW2OZyE5 OuRkkI6r5W3fMeKJh2eNL4oDxxamwbr3FHiwNQM8pUqDsZVhrAIU6d++ISXCtsPS 88OhLqt1nFG+j7Fofd4r73Yz1C2gbLCBvPdA6IczoKA/tC3OYDu9DzJq64OMoWOg EfiQBEEduL/zRkeguA5WieO38he1KbtwJi89t3zzE9r9gTeDJXUVDzpiNN7B01eN Hn2yomRuJxzSpbeyARuLnjJ4Rw1Mb5dH5ry2hpxiANWufbSyUutVfA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtcRHblJsVgqDWMxlSccB k1SZRktP+lhRr2Tiz+iXrkkrXbF2KPUdgHXKZH7PYLFBungNImxu7XGU1+2QIlLu LbeqX+Yzx3KwD4f6RKkZjliqysbavghByJdCt2giOfKnjx6IJbHxVtwTnlBro6Kn QdShiHMbUrfOVJUUC2WdvhDxlSnDzcmfymnD7IhclWtebWVdL1ITZ9el7wvDJF4i g0ppP2BrohiZuhl/101mU7uLEqNIqeB5M6/15b+EysDrrJ1tLsTp3kNEp+OtOzEm KkID5lPeLtynWLF6s/Q8cayB+h1pVRjtD4rKq0EhFQLlhNwvNr5vZA5fsB3gs1x6 dfwnf+nacr/8sDMEa/NytYBKqa9v/kom9PbawzT7gbidtwYBKfoA01HAwxbzknii e3m4Jn3JiMy1rQhlSDg7dszSsW9+ex9jE8Ix9mgtZs1q50pf97TdlE8oSwfUhHHR YP20t8o5vJc9Mzb4MSawJWKC6AAduArIRPVtpt+q9SktMVY5v8JRYbICUkI+L+l6 J4WyefUP/NCJDmYzPCBwWxpyDsl/jCgNBXsHzV9huO6vtimthBLEkligVU59gsXM C1uUYJHhMyvLrgoasHTXjnE3AIye61mr8aMw5Dt0NDt7X9i21fOOVLAXxl/4Ikbt SSkIoH0t6A8thdVG4eWLr08CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344002507300549567324854953526526809793110 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 20:54:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 20:54:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokenzz.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741543500408150956634701445681480666592004312283891534074869765118402932578272743475840443951498409994115564154501540238861161169732518797250927716211760175287514135904238234643041080658269947372386669977798445162010220886447281807616314904555198393635457145491151160575769016184367894654612908556310882129772741550152366603597507389007539932702487147676093103052887882373073970445195330778608826936202112072292520694937411342473316119922014920205495625084114017173748300949341420462282045393285949047945232753505994853678848262993212496056177684527583787588180015626820152447723156195552454007595313720341136172528140528804061784612101637798409315279494759041521616269698752294999262464722383828770899843645599411256105968162092215533539203231630376341261060932404317206511639954912005336336650082963213141504600194733210628746244361632497933227232249879603625090873291903753000944963308282406421315108851029331977231520833532603465456085825015799523652837865137324481380706369180086947664242855438667756399973275294202381339317462819745967148917385737341280215748039556851419745753206752563654415502178112333724504357648374667499003026629822656213551282569956363675389345096611586837782180971634111534659256725963730146304423866191 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 51f6131bb297c327b54976f9068501adef7b4c8d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokenzz.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017098185b590000040300463044022053135e3fe39ce8c3ba11c2b2e84d9c5d658eb0e3bf63587f81efc90da1892f7f02207f2675cf5e98e39e258e3b1a0c70b047f6e750ff686d1288f23e6f21f980ab66007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017098185b4d0000040300463044022047b39a3dd26d69c4e50fa902c62e618d5ee978cea82d81244e2b1debd618e7650220594ab6ef291e379b77c501f19661e1ec9a4617ee921aabc971b5c2f15deb39c5 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 003708e816058a55808a78a752eef012036607c95c78fad6eb09a3f9d8e71ada7e6e56a00d4e4825af4af943e1b9b906ac0291afd422c3db16c09778a7383763609598756d8e6721393ae464908eabe56ddf31e28987678d2f8a03c716a6c1baf71478b035033ca54a83b19561ac0214e9dfbe2125c2b6c3d2f3c3a12eab759c51be8fb1687dde2bef7633d42da06cb081bcf740e88733a0a03fb42dce603bbd0f326aeb838ca163a011f89004411db8bff34647a0b80e5689e3b7f217b529bb70262f3db77cf313dafd8137832575150f3a6234dec1d3578d1e7db2a2646e271cd2a5b7b2011b8b9e3278470d4c6f9747e6bcb6869c6200d5ae7db4b252eb557c