www.akyba.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:23:0d:a2:4d:06:f8:97:19:74:7c:0d:51:c0:3a:bb:0d:78 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.akyba.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:23:0d:a2:4d:06:f8:97:19:74:7c:0d:51:c0:3a:bb:0d:78
Serial Number (int): 273264863315847716116219968530460490534264
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:16:0a:55:b5:10:a8:23:5c:53:92:15:2b:1a:ab:62:31:89:41:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 04:ff:e8:29:cf:10:5f:70:58:92:f0:59:7c:90:47:b2:51:62:de:1c
Fingerprint (sha256): 5e:f9:13:fa:95:9b:65:50:5b:ed:08:34:17:77:8c:69:c3:60:04:14:0c:77:0b:cf:45:24:8d:23:c8:79:92:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.akyba.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.akyba.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.akyba.com

Other certificates including the domain name akyba.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.akyba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuMNjmzwcx5bbt91TZToT
pzp2i6efKVM6QFRmYS3sU5k77nM2S6jOrzoBV0oeZ2uVr+6P1dpGqKSs+z6lAkoU
4riseX6aZJNjzJ6dF6eZdQAuQE8gCVo7WmqBBkIe8NjM+INHqvViINKWyg0n6v2H
M/Vhok583WJpefEyZLSNvZ0KTX+2ouGq/YJetf59YIqXB8E25eIgJuMJPvyaAaBo
dMHzEzbZffLCu23ksvnCko3+9+j72kgiUP9F89/RGiYrlGDCecNpfCEu6jxmmVxe
mNJlCsKjtW5s6IhpP+7vQeWUQaLEoB6DFdzI5kAHQF0kbCsfX7vm200y1bi6ANxk
og+6/oUk5D3xVLK/kx52glX+vN/yhk2/lO5b5RuFDvvE6iqgoWUWUE/pH0G4P5Gk
AG0QqNVgExQLtvvR9cs5+l03L6tD0js/UwP2sD0xL/KvWMUxD06n0icET0AwfvBq
jjK8RtuZyOHPOAk4AbJMnQy8a56DXvH8TNQ3gd3qnK6imNZ/otoqz0kXI+ajtGJG
CFnMSM6dIs5bub58WCe3BaavjSqo4hRkP+6kWOVyNS9ugIxFhmCVCPgv3wjUR/0i
tG/8ZM+zpnj32WdrbDRuyyEF1ZgkLSTUQVFv9fAbH4WjrcmKYRHcEQ/SQpsBHTyL
jne2jx7lbi6G2IbwbrmoTgkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273264863315847716116219968530460490534264
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 23:51:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 23:51:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.akyba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753768250435828439886327138994483312120557442914138232434344444421769790746766080996432696566382747911579155907353917377710703120697359814475556281105137849066660771257895147744912181118363947670705714957443078471158210825947678530404012789676596845972437554865896858674769045347904730217018122125514670124299583158547576898007563418914497722943521092154667599230294840888816245994327048157879962599071497147868919791599831302248075461839604129570970877594196867458486463791945680148276935451542184896503981046761561441551574952764667738838637622290264305264787727893393609188197467358495627072035729328459096547122877664121169535946367930763403461660602861099970842236542732374798739532175307623422539502269774229327351248175557521477411644452316775307796271980833571357621425366778042702579817689250673701767482971868365030375892730819402309898541484586326678056001841569937947848020313473547808608012244757012843868939260386094009591811429968194234510386968487045993314961628734062450786437862553759384150377976148923596469636376623629063063964968474254195826644367503338924499869513200486622812464547033639773191528298502685513303129595575993341476751823824280730115963279698234518666853524255792161881488268982287525992934690313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05160a55b510a8235c5392152b1aab62318941ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akyba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d47006eef0000040300473045022100b186b4cd706b4ee48d1701d94aff812fe6b92ea4507abe294f4cf5bee18fd50802202091ecb7948ee3758533d45ccaa5caaa4cc3eff3bacd8c932fb18a0819b648af00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d47006f0c0000040300483046022100c112f4a07347f6f4df392df652f42cab2fd95159a4d341db52f7aaba9f6c7ca10221009775da0252dd0edf75bad81fa9784c65a42a0c82e443bdbd9dcf41a73ade45fc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0025a476a83197c69c4156e2b8b64cfc89ee8bb22216fa87ecfc332729c8556f3216fb34331bcf4aa600d2378ada5588df2b360492e9e294cd195f76f24f0e08eb10a26b16a6e210abc87c01b3b47d049af8978a9e24ff4fea4ab5eeecf70bdc04fea4ff23cd1187393a31094d8003da122034376b24cc6d3070d8d8e85333bad42a7dce88ad19765a565bd3a3b017e32682c6687353699ebd94af63b15408eaf245f74d5f82e98ce6ad853034f2620d1d46224b2e88436d283d17837f9059bafadc6a4fa6b0cf981061119f1e3eb62d03325f0ff6eec2056a05f401218824461c246ef13b7386ce08096c1fd3966e77750455da1a347c91f7318ad49675e1a2b4