www.tokenzz.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:ee:b8:f9:b6:8c:4d:cc:68:4c:01:7f:6f:43:80:e2:56 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tokenzz.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:ee:b8:f9:b6:8c:4d:cc:68:4c:01:7f:6f:43:80:e2:56
Serial Number (int): 344002507300549567324854953526526809793110
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 51:f6:13:1b:b2:97:c3:27:b5:49:76:f9:06:85:01:ad:ef:7b:4c:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:f1:48:7c:18:d9:46:c8:de:fe:4e:04:9e:b8:1e:a5:e7:43:db:d7
Fingerprint (sha256): 5b:ca:af:11:48:bf:37:8b:e0:e4:83:54:ae:81:5d:4e:6f:af:eb:1f:28:27:b4:25:1a:f2:06:44:93:87:e9:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tokenzz.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokenzz.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokenzz.com

Other certificates including the domain name tokenzz.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tokenzz.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344002507300549567324854953526526809793110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 20:54:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-30 20:54:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokenzz.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741543500408150956634701445681480666592004312283891534074869765118402932578272743475840443951498409994115564154501540238861161169732518797250927716211760175287514135904238234643041080658269947372386669977798445162010220886447281807616314904555198393635457145491151160575769016184367894654612908556310882129772741550152366603597507389007539932702487147676093103052887882373073970445195330778608826936202112072292520694937411342473316119922014920205495625084114017173748300949341420462282045393285949047945232753505994853678848262993212496056177684527583787588180015626820152447723156195552454007595313720341136172528140528804061784612101637798409315279494759041521616269698752294999262464722383828770899843645599411256105968162092215533539203231630376341261060932404317206511639954912005336336650082963213141504600194733210628746244361632497933227232249879603625090873291903753000944963308282406421315108851029331977231520833532603465456085825015799523652837865137324481380706369180086947664242855438667756399973275294202381339317462819745967148917385737341280215748039556851419745753206752563654415502178112333724504357648374667499003026629822656213551282569956363675389345096611586837782180971634111534659256725963730146304423866191
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51f6131bb297c327b54976f9068501adef7b4c8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokenzz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000017098185b590000040300463044022053135e3fe39ce8c3ba11c2b2e84d9c5d658eb0e3bf63587f81efc90da1892f7f02207f2675cf5e98e39e258e3b1a0c70b047f6e750ff686d1288f23e6f21f980ab66007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017098185b4d0000040300463044022047b39a3dd26d69c4e50fa902c62e618d5ee978cea82d81244e2b1debd618e7650220594ab6ef291e379b77c501f19661e1ec9a4617ee921aabc971b5c2f15deb39c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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