khm.imsma-core.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:c2:ee:ec:76:74:7d:48:c1:18:e6:d0:46:64:d6:8a:e4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=khm.imsma-core.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:c2:ee:ec:76:74:7d:48:c1:18:e6:d0:46:64:d6:8a:e4
Serial Number (int): 298686746583531278784615002013032575830756
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:51:09:73:f5:47:f1:23:b2:ac:ce:9a:f5:f6:ae:29:8e:30:8b:4e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:02:21:7e:10:67:42:da:1d:39:b0:fc:c1:bc:1b:3e:b4:52:a3:57
Fingerprint (sha256): 5d:a2:3c:70:5d:82:e4:bb:12:fd:f8:43:b9:0c:1c:f3:4e:fe:ac:5a:24:40:d6:c0:7b:5b:2a:74:51:80:20:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate khm.imsma-core.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for khm.imsma-core.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

khm.imsma-core.org

Other certificates including the domain name imsma-core.org

(limited to 100 certificates)
mod-ukr.imsma-core.org
demo.imsma-core.org
mod-ukr.imsma-core.org
demo.imsma-core.org
khm.imsma-core.org
mod-ukr.imsma-core.org
dev.imsma-core.org
khm.imsma-core.org
mod-ukr.imsma-core.org
demo.imsma-core.org
khm.imsma-core.org
mod-ukr.imsma-core.org
demo.imsma-core.org
demo.imsma-core.org
community.imsma-core.org
demo.imsma-core.org
khm.imsma-core.org
imsma-core.org
dev-cf.imsma-core.org
dev.imsma-core.org
demo.imsma-core.org
khm.imsma-core.org
dev.imsma-core.org
tnmac.imsma-core.org
sy.imsma-core.org
dev.imsma-core.org
demo.imsma-core.org
mod-ukr.imsma-core.org
imsma-core.org
dev.imsma-core.org
khm.imsma-core.org
scd.imsma-core.org
demo.imsma-core.org
mod-ukr.imsma-core.org
dev.imsma-core.org
khm.imsma-core.org
mod-ukr.imsma-core.org
khm.imsma-core.org
dev-cf.imsma-core.org
demo.imsma-core.org
dev.imsma-core.org
dev.imsma-core.org
khm.imsma-core.org
hi-wos.imsma-core.org
demo.imsma-core.org
dev.imsma-core.org
khm.imsma-core.org
demo.imsma-core.org
dev.imsma-core.org
imsma-core.org
mod-ukr.imsma-core.org
dev.imsma-core.org
dev-cf-dist.imsma-core.org
demo.imsma-core.org
demo.imsma-core.org
demo.imsma-core.org
dev-cf-dist.imsma-core.org
khm.imsma-core.org
ly.imsma-core.org
mod-ukr.imsma-core.org
demo.imsma-core.org

Certificate

The complete raw certificate details for khm.imsma-core.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH+xfMqLao8yVJ6wr+Po
v6tAXpS9/h9vcgrF0uDCQm4BT6jEOoPyjPD6BQgkmEkBbSo6pCmlSzYMoy4Ub1X9
PmHheiXoq2YU7md6doUpNUemn6sJb+eOUXa6lAq+yM7WqJJBhjKIDllgjr/pWABn
z6eZKw3/EvQHukWCXjTozq0oHDDTigKdR/18AFsfivXi5CCrltJTFM9s3GQqU6iF
6aCET03cO5olCq6KYBXg4GUqpJkw6w8NeHs18aoqlVNOT27vfJn+cZvaH0FwfsIF
r09xOMGpVqfLXh8/Qzco0q1cnRA2O2KG4spi+MWwpj5TcsiDXBT2jpjCWP/9O9CS
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298686746583531278784615002013032575830756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-30 10:28:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 10:28:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'khm.imsma-core.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20261096712780205690777033993857791096758638770813950026460944037657492778059005408747323954823528630668886417493070697264086265983130362621122559144537776013265997269036803834777854197393120629525113413381391575857165784431354634553149319689037658166770454843531846866827396802424795840542655030858533382604831413358872471117030515185329005631750762386663516017910342784664177242130860766822314404627939348354779305024538089486016835932823806642232455438073946887762907979062517313339269954886413930173930698112316581857978045001774925303706967688900863964698378188384470055291539238459247123087789801496279849669333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce510973f547f123b2acce9af5f6ae298e308b4e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khm.imsma-core.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ebc117b060000040300473045022100b4e7624bb2362205b407d5b8ff543ec80c059b9aa4d5aa534e030a4d9f7d21bc02207d5fc75f2f23591fb5cf2b1e323f6de5308fd6cb6a6b31f19d1de648211e1b3800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ebc117b070000040300473045022100bfc999fe6c7de4289faf42d0e52f74a23b4655d814abb115bfa45e7e95be30f002204dc9b40ed5725466ed0848c531aa566125b9c8f4d5dc2538071b7c4b44cd0818
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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