www.tokeniota.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:1b:0f:ad:47:8e:44:cb:e5:55:2e:d5:ca:99:e8:9b:39 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tokeniota.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:1b:0f:ad:47:8e:44:cb:e5:55:2e:d5:ca:99:e8:9b:39
Serial Number (int): 288595417703820978779397452450596603337529
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fa:c8:64:18:77:f3:5f:07:58:64:1b:9e:a6:10:91:93:e6:3a:5a:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 55:ce:90:99:2b:b8:03:4f:7b:68:4b:29:78:42:ce:0a:90:b0:12:43
Fingerprint (sha256): 81:d9:b9:cc:61:de:05:95:1f:77:df:0b:e7:ad:5f:11:a4:0f:a1:25:47:cc:1e:a1:15:88:95:13:5c:27:21:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tokeniota.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokeniota.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokeniota.com

Other certificates including the domain name tokeniota.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tokeniota.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288595417703820978779397452450596603337529
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 15:22:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 15:22:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokeniota.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776602662040625501210092917174047172448205762620403596141400319303110839729206235964521332567848217779473413043008854863764199185584419771451262289812693762035271134607084090053381823986414713172593942911795842553377502770903411933449483725782889399758684056329453077713255113843232332111760238652897800858409576550675478430087819219088804014120876963699443391587787892231355364054119791624624555470542828468069506496334096912127289890965754208332474125757592568564832956132986452286768175542254142115772822881058058823177693540278171459919800641909554748339727279601468045669043402977125042666962370090483423002957465973054902190960915902556368759880845145551821763627904897729385100345205480009778815214112829977075873816674277226050704512965153688584003859864768861458914071164935069844557723132794554536295991684761907063953968708785797866011521919245767039682566949007628314367550544187104150823653888642097988775486825663723433834421549656441537238458090982211024810706934722201974819864005584401850353219442886084995565871941452233499623931961078368482041093966352805399662239678059540979898216265049971364534178615787671880864130420730281062255300085870846591253967380266426883993168983444595032673478822845682877928095012111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fac8641877f35f0758641b9ea6109193e63a5ace
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokeniota.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016edc0518cb0000040300483046022100a2a5d2c9cee39df704d91ebb21020dc8f5ae7b815e04a190a5a46df0285c0a92022100956e77dbe461b2b03c48b9e02f829e8b83567e3d3d63b4804240aaebd90e829900760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016edc0518eb00000403004730450220134d4128dfe059a357dd651013a24ffe26793c48d22c69ce04ba1bf4d96d41b4022100bc999a257029bc6144ec4688a0aacad9e755748dc8e8b57ca4c711fe6d3028ea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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