lyoka.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a5:31:c6:17:6f:d1:a8:91:2a:cd:3e:e7:55:d5:c3:1d:f6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyoka.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a5:31:c6:17:6f:d1:a8:91:2a:cd:3e:e7:55:d5:c3:1d:f6
Serial Number (int): 317549609059161670260166054698578184707574
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 18:bb:d8:b3:e4:2d:52:ed:dd:bb:fa:2c:93:fa:f5:05:d3:89:a3:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:4f:a2:c7:f0:42:8c:f2:03:db:bb:47:f3:98:bd:6e:7e:4c:e2:3e
Fingerprint (sha256): 7b:70:c8:8f:06:70:cf:94:dc:0f:0d:ee:8f:c8:50:8a:ca:83:0b:ca:71:f2:35:7c:b9:29:06:89:08:57:af:7b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lyoka.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyoka.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyoka.org

Other certificates including the domain name lyoka.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lyoka.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA02PnBzEi6BGoGkQN/Gyt
vk8Z18jEBkc8UJtZGaQOb76E3f87gjL1eqggAbkSJfhfbI1BQGNHb3CLtQEXn4u+
RjXj8WFoDyzWem60FlvuJ9mSKumsTlCZQQk9KnDGnvHZCBNL3YAFedUGlvhDXMUg
mlbsbuwWEaVk5C0saVY7GbWhJOyt0NSJh2Hw5k9KCLTseIs3ZaQKAus+q+wz4TjC
+RU7Z/jfK/02yrQbxyCMZUZThwAsZyzunWuG7l5kE5S2WDsls7TbfZFH9Jr6ipyE
uWyzfRdC/yVnJ3juNQf8UunwDkF5Q1V+r788Nc9Fs+XPFF+2WA2CpGLGEHKh0YWX
W5yiwfZzbAY0up48GCzgQRjsUXBUzHnBqLAMyOq/Fe+/n12QEy6CkoH1iYJXjQD3
WLQ7H3Zui4NnRpyniKk+AAyfBPfi+FfQfWkyvBDIrOaXj5XBXWEGTMDD7FAvQZFI
/u3z6Flkr910QuiKSSjzVdIHHX1YjvtRyMKP0OcTqVjNtlHto15R6eWBJc6kRZsy
S2qYpIWH6DjYrg6l3wjdatfd3H310SFM9+wE8dQbFoKiTxWjgYK+AS4HS2Qr3bib
8wnLd1H4LctQbRd37VeC/q4LtHdMgo4515S01TCJzSpNMPREPdq0VbbR1wFkcRmD
MTyiAyQALucdbSfpSTbJY9ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317549609059161670260166054698578184707574
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 01:27:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 01:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyoka.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862396954804443162372824552843221880423791818764281853696799776154101672626172270320517022887825710202379150034757506136089180594738275529854546608200341117790578225254194020207094769130210982134259016284318400273396637990000782428345323560186017385116640444488942443376878841794228673321514953253121104640867234270947142098605393173487619242271898513052424958913691248329483861300720471683403281610269970116340322565432533270296384144161784529791989728033324479598414315126332771368345878478395042862861926631476285369128527312592953321898908369225254933508164554838187612373596771354037464467999623149431617237237184940053696047774649310880054173351027045022955837028352632112028770692111374194940106358394176537187329866736844050859786972854368955533465028774171819148693210652502810436185483388398328732346009276044252709017452012727403098837913719686705845853477018923573560101688805242377357181253742554877299999580461157897998748971410195031182242063127880055135232423906679584071694056590168713348690561718300069232577853657232612554198341140377690353157031107358269342816046525589017142655377175082738606841174444702893136445679899350216447828509755995711147943092357967055128818427710262319145183072396689244780751602934737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							18bbd8b3e42d52edddbbfa2c93faf505d389a330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyoka.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dc2f11517000004030047304502204452f22b69f1c829970f918529916f9d06d47688813492a24ef503783920386b0221008bdb0d76dac81482a99531f406aa41a99713e3dca709421104be9318c75b74290075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dc2f116070000040300463044022074e64544e6e6fd9f47a17bd67faa0aad0fb6e06fef1b1b1a2d5b7982cd8c33640220623c896117dbfd1ef640924df77c4ba93a7c508099e2fea71813753f3758a2f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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