bktco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:d5:1a:9d:42:e9:55:e5:4e:f2:23:36:06:73:6b:6f:81:61 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bktco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:d5:1a:9d:42:e9:55:e5:4e:f2:23:36:06:73:6b:6f:81:61Serial Number (int): 420964664356823856234320147337528094982497
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 7d:96:f2:e3:72:74:c1:48:26:88:90:cb:23:43:f8:11:8b:29:7d:1b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 1b:b0:e8:18:d4:59:76:83:ba:92:c0:4d:cb:53:81:58:09:d0:49:ce
Fingerprint (sha256): 78:31:b2:7b:36:99:e9:f5:11:c2:8d:19:61:48:fa:f3:95:d7:9b:a5:ba:09:8c:3d:41:4d:7e:33:f0:3c:e5:51
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate bktco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bktco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bktco.com
Other certificates including the domain name bktco.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for bktco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISBNUanULpVeVO8iM2BnNrb4FhMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwMDM0MThaFw0y MDAxMTAwMDM0MThaMBQxEjAQBgNVBAMTCWJrdGNvLmNvbTCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAK33gwshmIZwRfmeao5mool2Te8Lg2BMGWt1mvAq HBHmBIxGBGSPXbcwFkl6SJpAGZg3zv3pYADyAgs3btg2qZ3Dc72IZuC5FB1p+Ker 29/D75qYJli6E4+OuYF5SGXBByhwy0XQme35mEeu0fwuVkvm8WwZzEQt1AxX/GeM VHjlD1xlOxh4a2f2Z6rR/hWOJWuqIQHVTRiiSXPrEMUtfj84h0dxSs6t4U9zfvmM b11K4SZ0jmOVHj4AajHX6LNUYHgqtGGECotCmlz5zI+XxGbwhuY/6zmoP4psHBxI q1528ji8GvAAjlDfqd5qXeaZ2lwY8mn4l3vTzQE5aKHloyZDRuyd3UFpYyN6Eldi DQFrsGsOgEfdhJpUF6mllk6EgYB259cI8/KTUXZyLwsbPcv8vvniixG3rVJcGGSH 6Y2n29itm8E53VvmG98I6rXCSOEHIY94n8yw98T13kfo5l+dkIUE7yANERXrUEWa 3RXBJI1eJ1HTbAMJASjWaEI5VM6VImThK2/MCj3udZMTPuDIJKYpGvgMiUX1Wp4u TbrE73ZOlbnk5gpCRuT/KCcB7ljMwU1kiPi+IA2nQ/1ERfUab6w0ikWj3z65kIJK lF80/N/blTxSLF7ek/EbLp+ErQvfPriv0mj+yFwZu99TO+e5QuDz2cZEzfUPW02a ffoXAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFH2W8uNydMFI JoiQyyND+BGLKX0bMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJYmt0Y28uY29tMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAXqdz +d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFtvZokBwAABAMARjBEAiBe l8j0zhgHECZFInSjqzzzbOLkfciHt/XwfpPIICtbXgIgHKpQtDqrSzkmQQd4oJdT ICBt39oplR0+7rNUN2Bg6QIAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAW29miP4AAAEAwBHMEUCIBy3imFHKiR8On9lF35ZS1QJjUobTI6ZsAFy fhZbCYmOAiEA9QChrjJUYTcYo2upKGjwhBZc+XZYmWGdDbOt9EUl42gwDQYJKoZI hvcNAQELBQADggEBAIxoO2iSOFj0sKTDwpAPfVymdZMdUyhoBHgcER/temgpDDbG 1ErttIUyuzqlbAe2gdmfGCcmrT+0VPDAYcgJML8wDQrYR9WSkCQ2PlAtK8z7ySV0 5KF8yKl29xdzoOecvTZ/GdHPT0Nsu3CO4dT4vGpO65NRw3I45SFdHu1cdiG/aAu1 /8kbODEOUPSsLVfKW8EF4HkokyTk4sGVYSO74+e1KPXJAZbZw0viH/RxvuD8+Yvu ozmF0IcxTF/Jx+ekS97MrbrSPEWNKU8OcMB/yg/c3I7wdGncVd0IreADMo4nwxzS 1dxwPc/9GwNaX4RflF4tMD71LFpaUs2YLVwsekM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArfeDCyGYhnBF+Z5qjmai iXZN7wuDYEwZa3Wa8CocEeYEjEYEZI9dtzAWSXpImkAZmDfO/elgAPICCzdu2Dap ncNzvYhm4LkUHWn4p6vb38PvmpgmWLoTj465gXlIZcEHKHDLRdCZ7fmYR67R/C5W S+bxbBnMRC3UDFf8Z4xUeOUPXGU7GHhrZ/ZnqtH+FY4la6ohAdVNGKJJc+sQxS1+ PziHR3FKzq3hT3N++YxvXUrhJnSOY5UePgBqMdfos1RgeCq0YYQKi0KaXPnMj5fE ZvCG5j/rOag/imwcHEirXnbyOLwa8ACOUN+p3mpd5pnaXBjyafiXe9PNATlooeWj JkNG7J3dQWljI3oSV2INAWuwaw6AR92EmlQXqaWWToSBgHbn1wjz8pNRdnIvCxs9 y/y++eKLEbetUlwYZIfpjafb2K2bwTndW+Yb3wjqtcJI4Qchj3ifzLD3xPXeR+jm X52QhQTvIA0RFetQRZrdFcEkjV4nUdNsAwkBKNZoQjlUzpUiZOErb8wKPe51kxM+ 4Mgkpika+AyJRfVani5NusTvdk6VueTmCkJG5P8oJwHuWMzBTWSI+L4gDadD/URF 9RpvrDSKRaPfPrmQgkqUXzT839uVPFIsXt6T8Rsun4StC98+uK/SaP7IXBm731M7 57lC4PPZxkTN9Q9bTZp9+hcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 420964664356823856234320147337528094982497 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 00:34:18 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:34:18 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bktco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709722800361575570582614324297442935730700982585203548145062064658252493789739858615086409673555263187112489395953766292742961658433964157628521280846052780204245777423030260721770914012032482476684237489879549523312707768161173658188343539966643352679699399890748577860560492287183063000310046376982856105426493019171100461620662716300866537299417227401759511136569423079696727623499817002100172064005012651521204763885467264469481949920315171804064918496760127784706231920367684177070719540375734700186583934028475406306363276706644093987554022155092199008650548096448323637575702512250715634281994242645114519406286517013547212500890905040719240069333399093042597885131437191494927666613024001442329368696153425813051153151560796885755938047550002759628551928489760365747246814233033371691917618255104681315470607260854838513911613947695716825525290049920129962172707050184162667283702812117284214294002037614891982656459024712571827785498138644663673414922586594345974687778626916470800228269325641297679808518238817399522181908739807485534519133342627689471456253262757608362354179929482922884110861035753184023503154123540167340901360822080047752621728796587102592874043558442889792865242154231171490111297565171220908213139991 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7d96f2e37274c148268890cb2343f8118b297d1b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bktco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbd9a2407000004030046304402205e97c8f4ce18071026452274a3ab3cf36ce2e47dc887b7f5f07e93c8202b5b5e02201caa50b43aab4b3926410778a0975320206ddfda29951d3eeeb354376060e902007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbd9a23f8000004030047304502201cb78a61472a247c3a7f65177e594b54098d4a1b4c8e99b001727e165b09898e022100f500a1ae3254613718a36ba92868f084165cf9765899619d0db3adf44525e368 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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