www.tokeniota.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:bc:8a:8a:dd:fe:e8:5c:13:a5:b6:cb:9a:02:61:66:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.tokeniota.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:bc:8a:8a:dd:fe:e8:5c:13:a5:b6:cb:9a:02:61:66:f5
Serial Number (int): 343935804806882729406014861312962733369077
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:4c:88:b1:38:c4:03:18:49:59:cc:0a:07:0d:96:23:2c:82:d8:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:74:f3:b0:80:59:11:28:96:ea:4f:3d:c5:7b:cf:17:d1:7d:2f:53
Fingerprint (sha256): 84:4f:ed:a4:7c:d9:17:2a:4a:01:3f:f7:c0:c2:e1:cc:0a:e4:00:e5:35:fe:00:1f:ed:8f:6d:68:43:08:d8:48

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.tokeniota.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tokeniota.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.tokeniota.com

Other certificates including the domain name tokeniota.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.tokeniota.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA02mJ6piKCSYiHUiHbm9K
TeosOc3tysqMoI51aOJ3EdcWxnC38hs3tX/RtTIxRoKpMGztuMiHdx0Fi8460p65
Jq8DKKC6AWKB0ylfTJV0DoYqMafLRz+X4K3DqBEsKS30GQe0IrbiCQKSRd4pGi6d
7oW0MFqQm8udwuPh+PFXWEF8e9iOqN2YrKwGh1HKfDp5AsQzjPURdyuRakOsEx5L
BXzEBtdfmKxDil2sxYBYnqQo37yZl5D8VgRxphMWSRXudUYQV7aggyVVGxIu5dF7
tRpxlT3BovOXdDzKdvN3ZdLdeVokjshGIctxcR4n7q/7aP1ZYoM12LUVJyWdSaSK
PSt4haYohbZ8Qv+LfgS4u0zFx5WozFnVgKVFNWKRC28TPK59CetPihMZZhAP8dQc
B56SVVPGQpgLwbobyBgc/zM7DP4q82bKeRjBuOqLUiPI42IhOofpS8CpsIAxW6OV
1wbwuxImlF2xKvSkPdcNnPMKBFUtcyNHGDcw8kDJomtgLYf0wHTzvPdyChE4/d5s
yf2uRyBR7u1D0Zjoceb+6IPV+vd//F3qIzOLkwnKmXE2TwxP1fLb48271P0jxy3q
ighvIyoRYsYSaqexyVIF+i8jMa6lq2BtBbT4/vUB4jSijnCJkBpurBIBbZoCIlrJ
38rUmqEwL0wZ0yrlKr1hgHkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343935804806882729406014861312962733369077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 13:57:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 13:57:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.tokeniota.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 862486775218869509241608205929141062810252585936252646441524978633224529169497345494471495912582395764336881239287038087828116924630054820900882948130418156712573093121590297430076155459989072155587912081964654930097516423715005311067571635535048273284372295208481967401468452419546799929315659047191501664815829860634775202557865749174632316529893778881917247158095997257984513055038384182381493668531172770183550292512318011383003648998023362242490484352943531791762323776166360951503159602005662412258365540634183500581384347174496454295809161831638733043193619142495339431262882364410252046685394523295003587851870801582122652040668900773743869116167115274173164043845564157639538399928372786957390573088117822817504142397210451672223853811609654614263641103720898077092108406349931229076360428547202278779467451982450580983720040071293649233626997352364122001154606016032276317475823421925486065620691054873336027582296083964596551124886487829855293624971608449184015346877885679237636370337723157239476130532837778890047901820748781743335789868645098692000748010710216578961634093664367946236488478137543035308164561510698573485216079936257570425348991061842545262116368235602824478452576049039448411135277265581580603313193081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							864c88b138c403184959cc0a070d96232c82d8e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokeniota.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702a74427b00000403004630440220506a035f3222c6f3d23dce0b33e5022fa9003511f4f8c3f228a37840e70a9e3202203c8838d8a1e0669cba188e71738628b3bc0a189fb4a65c9cb70204883ae6cc440075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001702a7444800000040300463044022049f86899b70250f0f70a2a43595cbfb6d3205bf210aed097ac897132646957cc0220369fe167a657f1ac1ae50859d5704804eb2d25b85eac76f1e2bb9e5cb1edc08b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a63b1db9c9c00f68a37601499477d47dee0c5b3caabba3083c64257464421ef9123ef980aa9ee2401c50bc45029608fb910a1a1d50bfe5d9a7fd294e358c606d72c8e2b6be5aab56a8c2b5303056d54117c0140a3e0d54d84bd250c35d839e0273215094de78f2e513c54dd8cacd0e5d60c353f0815580156a4c8b6f58a8301f0d0f339403f43b093356dcc0c48d289c861645ee8582b45e16c1cc12fe768d40980a69d5a003dfb03f6a02ac00ae95a62aca454112f23fcc6aa2bccf73022ac820232ba2a9025512f647a53ffcb6ff1e5d3449e2078e552fa42a0171c5bdc5855e5b5937849bedc053bb40e1475fd8067b119232070bb3adc93df9f3e5bc676