lyoka.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:c5:0c:4f:d0:d1:db:5a:fb:b1:9a:cd:75:35:d6:1e:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lyoka.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:c5:0c:4f:d0:d1:db:5a:fb:b1:9a:cd:75:35:d6:1e:df
Serial Number (int): 341565135863287973741570340033301019238111
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9d:92:4e:49:63:ff:20:8e:cb:4c:fb:42:36:1f:b4:ca:99:a6:6a:10
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 33:b7:49:6a:97:ca:14:8e:26:49:bc:9c:d3:10:a2:b0:53:88:c0:e8
Fingerprint (sha256): 81:59:5c:9d:22:11:c6:7d:a8:a8:dd:f0:50:24:7c:f9:14:81:de:da:98:ad:a7:bd:52:2c:77:b8:57:84:45:37

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lyoka.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyoka.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyoka.org

Other certificates including the domain name lyoka.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lyoka.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISA+vFDE/Q0dta+7GazXU11h7fMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTYxNzE3MjNaFw0y
MDA1MTYxNzE3MjNaMBQxEjAQBgNVBAMTCWx5b2thLm9yZzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAK9LhTuAAa9yX2ArXlAF50jiG9Fm44WMhtSz9FkP
qJILMGmsjG4ImZWp6B7YOfVwPPumFhPZ4k5EqExNyhOBavSLdFkU5kOfSadZvy9X
FGNbi3rBepqNenWlN97auVWG8QDzk1dA4o7VgsnTUwgycPUo+1BQ2+L+FpI3K0fh
kyvCuSfZ2fAmVU1AOeSs4HMTGj5Qy3rDgxhpqjnUF84nNQXgYLDZ5duZkzwB5eEW
1PtqM8gDYgV9lmifM8l/Or4LTyUozc+tXnBcnDVN01sYoAqm7e6U7sbV2a9Sau7O
TKZWHFtIvz97TfXhOVZ9SW3UH5e6Liri+wlGuUNZOierGbhN1XIemV9EbGmgWiPA
dZHhsE+gkGadyhDBgoGatxpoQ/n16K11ui2QwKvmvUtL5fRrkWncCAO46Uxq4pix
KJRe2+B4qdidI4sbVf78IDqtTxDXn8S0IDngUHs+/keHimwWrzgnIIlgv2JHMx2L
Z1uCJXJZt3KzxoaXR5s/AQBBXxlxVcSsuKHUIip9XhFErcK6JdNTQH1K6K0UT+Sc
8JMgIjGcuJVmn3IxRDgpBraS7IXvrMKGqcwLGVrQ6iPsWBtN6nSaXieSS3pe+WF7
hQP3/wG2cZL1CBmNhDJIiociBrsok+XfIEqoQsRW1YkfF6m7OYbrVwn48y1t518i
nXyhAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJ2STklj/yCO
y0z7QjYftMqZpmoQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJbHlva2Eub3JnMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA8JWk
WfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFwTzgf/gAABAMARzBFAiAj
FF9/bQu9jJJNtX7+oBIqYG8ao1wBvkKlKSHaQXcyDQIhAJtI0UaUxGn09PcmRlmU
d+8AnVJlB+h4MckMZmwELlYaAHcAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6
GmnTohwAAAFwTzggJwAABAMASDBGAiEAuj1Y3VLExFesp95wMoa4IPX03U2Lugpe
D6eNvClYe14CIQDoVqfOqlMrft2y2LD4zVoJvZPOdnWJvBXe0/2veFD2czANBgkq
hkiG9w0BAQsFAAOCAQEANy/vYjMSFRtn+84qkihFMNiHWHKWAzhaoZrYq0GH5cMT
SaTE6fnH+l0rkB6GYMoJAo4XviloP86J5zN2fBgLFwYDJt57vTIqd91ywIHlyCvY
hCT7S9j1PZmpGYdmtlluurUlhIqOPLs+t/8OThqqvYZMbARysyUwbOEgRRUx6sXv
4LoZiZAARK2VCYwVlTFbjesuHOKHA/T+HsrVTuOLOpAKVcE3OkBWepzP5rijm83v
Qe9q7ibHxArHF0lBhJvyRllXUZczH2ynH8akygTlM80W8c1u9RuF7WyRfobEsMDN
B/rj8LVSfVyXQs/wMWEZrGa3ycCjtZhIzq9iFslJDA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAr0uFO4ABr3JfYCteUAXn
SOIb0WbjhYyG1LP0WQ+okgswaayMbgiZlanoHtg59XA8+6YWE9niTkSoTE3KE4Fq
9It0WRTmQ59Jp1m/L1cUY1uLesF6mo16daU33tq5VYbxAPOTV0DijtWCydNTCDJw
9Sj7UFDb4v4WkjcrR+GTK8K5J9nZ8CZVTUA55KzgcxMaPlDLesODGGmqOdQXzic1
BeBgsNnl25mTPAHl4RbU+2ozyANiBX2WaJ8zyX86vgtPJSjNz61ecFycNU3TWxig
Cqbt7pTuxtXZr1Jq7s5MplYcW0i/P3tN9eE5Vn1JbdQfl7ouKuL7CUa5Q1k6J6sZ
uE3Vch6ZX0RsaaBaI8B1keGwT6CQZp3KEMGCgZq3GmhD+fXorXW6LZDAq+a9S0vl
9GuRadwIA7jpTGrimLEolF7b4Hip2J0jixtV/vwgOq1PENefxLQgOeBQez7+R4eK
bBavOCcgiWC/YkczHYtnW4Ilclm3crPGhpdHmz8BAEFfGXFVxKy4odQiKn1eEUSt
wrol01NAfUrorRRP5JzwkyAiMZy4lWafcjFEOCkGtpLshe+swoapzAsZWtDqI+xY
G03qdJpeJ5JLel75YXuFA/f/AbZxkvUIGY2EMkiKhyIGuyiT5d8gSqhCxFbViR8X
qbs5hutXCfjzLW3nXyKdfKECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341565135863287973741570340033301019238111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 17:17:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 17:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyoka.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715141213901904279376650989659044099333590568546062814865395142309545773879144763347281741141823751351876559934689382092321446331040261072776263187350777756059708339093176246534657264820430336807122799755281390627573544293422671092789229979910097899303951587499791029973867654154991726639176575571840221930413971003666872120512998929581000914062207300982021837218488808579913766910758013968851712159729935120525332510526975523930255669299247071859302327267607901548175253033463433692849666552469076121239488964430797923510836347390769585627697943185444108196685341504825505414667176226277920951898230143432151610424916268264304478499863085110953468079279506706834786975181637544821814527666692023050565200360607381810310884801207658395615169415886625886709239542730305611307677566623410400502581988023406067358799984360043247044667516103006818447837007875176725929279029760326330684063853067303065507178301429647639893116577859180008238632736447041932327695848886710583792027818899477226519838467946527786219423099960634590307467503236601011634919832304168700450478033390893222381018755350775783385493284480415386615774641872630344586900646913030530461407700868334715929476362722175320673090078034117821569573850849936023463774747809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d924e4963ff208ecb4cfb42361fb4ca99a66a10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyoka.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001704f381ffe0000040300473045022023145f7f6d0bbd8c924db57efea0122a606f1aa35c01be42a52921da4177320d0221009b48d14694c469f4f4f72646599477ef009d526507e87831c90c666c042e561a00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704f3820270000040300483046022100ba3d58dd52c4c457aca7de703286b820f5f4dd4d8bba0a5e0fa78dbc29587b5e022100e856a7ceaa532b7eddb2d8b0f8cd5a09bd93ce767589bc15ded3fdaf7850f673
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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