kif.rocks

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:5b:fe:f8:c9:b2:e8:59:4a:fa:3a:3f:1c:fb:13:77:c0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kif.rocks

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:5b:fe:f8:c9:b2:e8:59:4a:fa:3a:3f:1c:fb:13:77:c0
Serial Number (int): 289362295519834000729713763347283074840512
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:f4:03:9a:c7:df:00:f5:4d:31:06:7c:56:a3:fa:b4:55:ad:e9:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 11:4a:80:b1:e9:2d:7e:8a:56:d2:56:b4:7c:f2:bd:f2:7d:92:c2:49
Fingerprint (sha256): 7c:dc:88:84:ae:a8:a1:de:5f:5a:cc:c0:39:a3:67:9b:b2:71:26:f7:78:9d:86:fe:4f:dd:4e:e1:64:e4:72:8b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kif.rocks

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kif.rocks

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kif.rocks

Other certificates including the domain name kif.rocks

(limited to 100 certificates)
pretix.460.kif.rocks
podcast.kif.rocks
wiki.kif.rocks
plenum.kif.rocks
wiki.kif.rocks
kif.rocks
md.kif.rocks
kif.rocks
kif.rocks
riot.kif.rocks
kif.rocks
apfifoges.stugen.de
engel.kif.rocks
apfifoges.stugen.de
tix.kif.rocks
kif.rocks
md.kif.rocks
kifplan.d120.de
riot.kif.rocks
toot.kif.rocks
plenum.fsmpi.rwth-aachen.de
kifplan.d120.de
engel.480.kif.rocks
pretix.460.kif.rocks
riot.kif.rocks
tix.kif.rocks
apfifoges.stugen.de
pretix.460.kif.rocks
daemon.465.kif.rocks
md.kif.rocks
kif.rocks
matrix.kif.rocks
kif.rocks
kif.rocks
apfifoges.stugen.de
engel.475.kif.rocks
toot.kif.rocks
apfifoges.stugen.de
riot.kif.rocks
podcast.kif.rocks
toot.kif.rocks
engel.kif.rocks
toot.kif.rocks
toot.kif.rocks
apfifoges.stugen.de
apfifoges.stugen.de
matrix.kif.rocks
engel.475.kif.rocks
gallery.kif.rocks
podcast.kif.rocks
riot.kif.rocks
kif.rocks
riot.kif.rocks
engel.460.kif.rocks
md.kif.rocks
riot.kif.rocks
kif.rocks
md.kif.rocks
kif.rocks
riot.kif.rocks
podcast.kif.rocks
md.kif.rocks
toot.kif.rocks
matrix.kif.rocks
riot.kif.rocks
podcast.kif.rocks
gallery.kif.rocks
apfifoges.stugen.de
md.kif.rocks
kdv.kif.rocks
toot.kif.rocks
kif.rocks
pretix.460.kif.rocks
tix.kif.rocks
matrix.kif.rocks
470.kif.rocks
tix.kif.rocks
riot.kif.rocks
apfifoges.stugen.de
pretix.460.kif.rocks
engel.460.kif.rocks
plenum.fsmpi.rwth-aachen.de
*.kif.rocks
kif.rocks
md.kif.rocks
460.kif.rocks
engel.475.kif.rocks
apfifoges.stugen.de
md.kif.rocks
toot.kif.rocks
460.kif.rocks
engel.460.kif.rocks
md.kif.rocks
md.kif.rocks
kif.rocks
podcast.kif.rocks
460.kif.rocks
kif.rocks
460.kif.rocks
engel.kif.rocks

Certificate

The complete raw certificate details for kif.rocks in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289362295519834000729713763347283074840512
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 22:51:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 22:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kif.rocks'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1017911687780830787708770852259504886099655615385040056774751478400638627115987511715906058686387245863318178579208587319238569260386795853855390042820812003831986147757116165802801283700889808083284466379281450636481519671760017882855445092353977426214481824220325436141551008126927492337020450360328210504900127052384549312563552118502231757305421076399672556945186919132036045788796506832521439323560538314429947252734560923780558607877764724222308818584280743008947713385649732738088308050996790724563211983952455573483711408155749464767354961778123438103001611538088757716686485985439752054213470249162850053379882262199993907112697601394967840102939816585534241579589328841275631776736020742576555812138510075533047825690501079388415057175217648135378579347006510360099909733542953828016967494768291165973609848699541574479495155689215383245832590351422641046698781953909335374421955468257139840236662161675124124288522752907982375446637419519559266077440231427304550843322815146224830828091859341776197931804235354443610009546936638392349606422682891709178018861896546858400249423300042248628736664755850740070415178615343498325998200730245040697532482464185506309474720188181795863593720056737890024220060973075738018093165763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52f4039ac7df00f54d31067c56a3fab455ade9c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kif.rocks'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000165211a9f26000004030047304502210091869f30d0f191cefb3095ac2a40f5e6023adde84690560a1b3dd7052e40d0c4022070493bb9cda25bf1b058807dccb9a1b7affe1e4eb6f0d3378781c8ba1541821f007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165211aa12600000403004630440220648d1298795e66b4cf9a073b1076cbfd47005a5279796eafcd10e0cebdaa825002205a2f24d754d399baf7d80f35d62f0898d0a52a8db55e6dbe5a13876639d3b7cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005123469b118d6c2e03a58a871b52a0f0288f1ce22ef01d56903aa0f7e3271da476e5377cef70f4ec9da394210f68dd2dfd717fecf0dbf7cb947d053b2a7a76cf0160290375cd4ae22972d00b2701fbe5ef3add112804e1ce6ab1d8b1f1088e30db97843763f197621f91b334a8906688542ef59b11a1f7213eb17e7216718ba9079bf9162ece480e65d15aeae117b0ca2defe256653ac2fe8dc61c5967743a49c3ca6ce8072ce6c47e0de781eb571fcc8037e8c54a256480f6957379c88a84af2ea4b799623a52f7714096cbb51cdc6b7c447b2ee9ae45ae81b79a8ecf3087ac98b9215044b18d0475ab80bcd9233e72816bf378ee388a9e572f42d429298aba