rokxat.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:45:3e:ec:cb:3a:c8:b6:55:68:f9:a9:4d:a1:13:52:c2:28 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rokxat.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:45:3e:ec:cb:3a:c8:b6:55:68:f9:a9:4d:a1:13:52:c2:28
Serial Number (int): 372012268684369519965826284098892399297064
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 96:db:6b:a4:40:2f:ef:4e:08:9e:95:df:fe:a9:b6:b1:2d:44:63:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:20:d8:6b:b3:a1:4c:07:f6:60:3f:8b:ad:b5:83:7d:d9:a9:dc:b6
Fingerprint (sha256): 85:14:1b:36:dd:75:80:53:c3:82:21:c8:18:25:de:a7:60:de:b2:6d:37:f0:af:de:91:06:06:29:55:98:1c:87

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rokxat.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rokxat.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rokxat.eu
www.rokxat.eu

Other certificates including the domain name rokxat.eu

(limited to 100 certificates)
www.rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu
www.rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu
www.rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu
rokxat.eu

Certificate

The complete raw certificate details for rokxat.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372012268684369519965826284098892399297064
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-29 21:15:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 21:15:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rokxat.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 727068573644721148219696470377983271446101519581820484376680071792938032984268990089079721365481883941216114542636793145051127389535813500800081837268678914053964449907401560167042832344436998563769313536662651437185231071554617394643381177902646326667515494299835391348852632516126543611196609882634326481710216526378611015442299530532185273749140496610701113206038323759720294295402484404938152682473219642310691123339033338132922909106929390193287048299190699725026684687374407376586959573836320945302404030613131610574427207117989450072387648610596500801137213631135256358282388451697027808166368945431603719401428783500088269775060506698444379085041725738132899366770880787408041100719242752441555240782342442469300250402224810312062201288658262304318648119603903450078307625436784470436443093990782630362328743264127992405530456728139693757885496841380552235091518773049936337816069742342155722459071734610528598189450529673956592488851040617322459526854804467190426855744809829453079675613656885499294702256542761876822626250476966523036685162421431260965784786467704065968111669911723064558398788705176259455370760396735544941852552218708818107102952491578643091195475278450526919930763532248391567669762654467042741138515487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96db6ba4402fef4e089e95dffea9b6b12d446340
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rokxat.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokxat.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016627667209000004030046304402206b8ee10da3a224a90c3e42d076c0722921d6726c8f9b7e3481b6f95927849e8f02206dfda29288db56c60eaf06c535d143c3c37d22fa22a218611a52c186024630e80075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001662766724b0000040300463044022010ae89aa4dd96b4728bae70fa29b9f7ca6f64dc67a3223f51171ab1eb87920e402200aab09991f3dc1cd114b5237a2b1b4c7e57eb0e8c12c6b19e8136c32dc6e4fb5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008fdf24035c50c41b27101b4580a42972eac5f30c9d42340d574364f0e9ac006060a6d6df2cda6edffa1c0c476b60be9e61864cb373599bd64fd25dcee44a10a870be7f75c3517f7c501837f7bdf769a77d827d843e5f42b086388f13e347b8e4102efce44a65e016092eab281694ac1f22cea5d94f8f8a55f5cdb723908d31bb65105e6043d6f14026f0aee525ced5ae74307ed2cb9d3cfa4e95cb91babd664386857cb2202d3fe7ff134880c104f0543767c23a81e19e42ed662087fc295befb03fb7a7b8098adf974ebbae88790176fcb20f1d7dafd6673580a557497e8da7fe4dc5196fecc5c24343a3d55aaf82d29b5a1fa6711b369ab8c944ce75a5cdad