www.okd.co.in

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:05:42:c8:ca:8d:c7:50:66:95:72:52:0c:d1:73:38:21:e5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.okd.co.in

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:05:42:c8:ca:8d:c7:50:66:95:72:52:0c:d1:73:38:21:e5
Serial Number (int): 350239327177018785884556726270027170849253
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b8:33:a3:d8:8e:a1:00:88:13:81:e6:8d:7c:e1:03:17:1b:88:8b:6f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d1:08:31:5e:ff:2b:55:1b:6d:8f:9c:dd:19:c0:6e:38:ff:5f:db:dd
Fingerprint (sha256): 66:3a:b6:f3:5d:5e:ce:ef:e5:3d:96:82:b9:fd:c4:04:31:f0:e2:5e:df:18:45:24:28:7a:bf:c3:42:5b:37:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.okd.co.in

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.okd.co.in

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.okd.co.in

Other certificates including the domain name okd.co.in

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.okd.co.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6fz7ONn+DeWSACIb//kU
A+LTZyag/d2dTLIrPP4BRPKAv26of+x+EQlJwxQF2W2gAmmB6ZKNfS0TtberD9NQ
VYEfCiPmvMh7oi3QyV0s+VEuESNrRBZ4aalf9FavbZXK/9WfJRgRv44vAloaqoRg
WyJWb0egqprMmPVpDmpz7il//yfMd3C5cgYKngZd1PHpjicywNk/VaD9jcKH51Ok
GxNq9TsscuKQ9QJO98eXTS23Oub2/4K5nsf7F5MynhT1ynb6UxHLA2M3kjLNsfzH
V9SWCblpbT2YaDK0YIIgY4X+6Tf19e9HApaH004kEFWQDZ909sVQDvFTt9br6s9r
y2wrQoo5Y0ZSlBa4JYYwi1Vm8vDo1fNU/h2TXkPcuaNeIyai0bArtL9jNukvPLNw
vLEi35UaQ5VW7qOyDHq/6aHtHh3HQBa1Rv48YI42e0s3heqG9NHrmdRf/9N4OXBj
RdaBWVPHz4++t09WEdTgbGrx/kUweAG63EwRDvUOnS4fRrQGzI8FYBFWWH+yj3bz
6/iAfVZzpn1y9cuyoKl7i0yvuajKheBUipEhIcpRqGpOGO/SvqOihPCAY+kqsn5w
2rnoSNNTV9g2ZVnGzwqGBg6rrzmwi6PlXNfI2FOo+kytHWUHNVn8YiclnOE+TEGP
SCfRMKX4FWegzeg7/AkM3bsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350239327177018785884556726270027170849253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 19:28:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-11 19:28:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.okd.co.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 954588606159990971627995831295607497438647202438714276455407688630278118338820741234288189731335178259594596064710897076496795551258713728698164419510197804145554606264235481991097683078028867436805681470964140298183050408582921147208986329542044230233266545060451614565100094445573425687385032290422481339426282340898441582128584794271336854627844461578392908423153166724261451863862188623387009536179271225135966616170921126837685124168187476836493615064452540365231174257802996443603548020119058235604580103833094656359606145910537223161613305028920184443808941540476852089324138157212512187834342159663329798474243861491957475810463539643945955614854196469090033729458401272679617624248033098648066986500885374170829082732832512603419265428950587335364078603180964964087414092234624974607003929062259485667295966544762277502846684048483703200010397175575623291740594984575468177939404367042156286410455457912005603398894129316693374339324803130434327052141222141368695146800296266787240723958494212164372633751799678679029713637774910981883529806221461800125177881006980929798967612755045796709863142144210386558207442861307204508977937479255232326372609214470293754108817185469737814971082377303027145170247843788939256757280187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b833a3d88ea100881381e68d7ce103171b888b6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okd.co.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170d5956000000004030047304502200859f440437bab7b250ad3a8e9b4f516c84319be909f8334446846397e78c488022100f81e8c0cc64bbb724d72c2375210da46bc908d7a752219194e7245c4b723e92f00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170d5956096000004030046304402203a6857ddc117c2df9865871780255ba6107b0216221cf301c7a9a0b9301dde1e02206a8ba5b1175de93b63dec879119d55e381bac064037fd03101bf652bf2bf8769
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002f830b18054b8e8e105bc1363c34ecc4166199b2976e3df1111d45bc5f9d1c62d0c4ead52288f4dea8cdf51c9be9daad3952da7f07dbde940eaded249aab1cf2e731a518f0d0137599d5d7ca4f20fa879e357263c833080d46c0b73310ec0820e65f6370225bdfd13faaf18ac70828400bc7b5420bce63844feb42cf5e3d8b25e8b9f76f608e6848767bc0c297605ba1a7ac04522252ceecc3505bb7c47124185546413367695d8a800ea63dc27aa1dd2d8a25a069e17491bd8e25b63b70f53846166856585dc11ad2790462aade877d6d209f075bc8129778ee321c6c220efb7c10909390fe33048c33c31ab8a9686792c48454873e3e231434aedf0ff7d28c