rtkco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:54:f3:75:7d:6d:2f:38:7e:09:38:b9:9b:4e:31:f0:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rtkco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:54:f3:75:7d:6d:2f:38:7e:09:38:b9:9b:4e:31:f0:84
Serial Number (int): 404708653531757624848280068520136815014020
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 11:ed:c8:0d:14:6d:e9:49:8d:2f:c7:1a:22:b7:5f:da:68:17:e2:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:b3:0d:1d:05:2f:e2:3a:d2:b4:19:c8:73:90:e0:b7:77:7e:8d:5f
Fingerprint (sha256): 73:d2:1c:b2:1c:b2:12:cf:9e:4c:73:68:53:b6:18:51:a6:35:21:92:6b:72:c0:2c:4f:61:ba:a0:21:0c:db:b1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rtkco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rtkco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rtkco.com

Other certificates including the domain name rtkco.com

(limited to 100 certificates)
professionalmistress.co.uk
rtkco.com
69387.com
palestine.exposed
www.rtkco.com
www.rtkco.com
www.ymoco.com
www.rtkco.com
www.rtkco.com
rtkco.com
www.qeli.com
www.rtkco.com
www.scopemedical.com
www.professionalpoker.org
rtkco.com
abbigliamentoaccessorimoto.com
rtkco.com
thermostorage.com
www.idoxe.com

Certificate

The complete raw certificate details for rtkco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404708653531757624848280068520136815014020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 09:35:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 09:35:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rtkco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 791453714003494816311052676631146951357686533737690309185498436281859310209197880901248896353383043672232999335452131666539281477833611791601096071284718755240879184648954051631444247621464322722071491160136601665362564491466685272438560028260382470321371930764757426158669316132919856751562708377632056612674478077685996500142938758586177024920613149397801808832208868305693920638392668845630161034921386562991417764365500356877524691802948453035828620560658487207913037429682089884827396801101459385051610658801493990257595313665552129249207937885527640295526381151843709496244231558357590519292763482537258240058800784039539160147857782501548204574921366073221635610177823096881735334191523686210092494475058620082947300145979426632662890916243341458142314372999022510030993495500309863971690110868714875837060798157789866320788956989433080069705671367188121861553706530724551369188927712824747538127134661867838921591493344306180119946426840481224820530511774333488460621763959665838030210267441713743729658983892244811402619840781611391410334033073137759748259674284588511964049009615046735517293372599699145703138236387064375002466402653174241208077221321538741574021644169842499260869373877709865795657181596369572380606600371
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11edc80d146de9498d2fc71a22b75fda6817e235
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rtkco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc4b050e7000004030046304402204a993b28eee63b59e992f80e45ff960a02aeee83e170b4aa3287f0b81c464e8f02206c490733000c8abdf6a06f59278d747545bf49964bbf1d45bc6c2b964f614b2a0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc4b051110000040300483046022100d73b11ba64bd2f9e9ba7b593decbd2c0f2a6a9ebb7912cc94e024ae59505e0710221008b1e05b7d06e6765045329a40a25409796c0f902accb3d5993c5782121ad0cc2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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