rokxat.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:25:dd:3a:c9:52:e2:79:17:16:6f:ea:be:dd:f3:6e:bc was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rokxat.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:25:dd:3a:c9:52:e2:79:17:16:6f:ea:be:dd:f3:6e:bc
Serial Number (int): 272956788396372695018866617218088188473020
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 81:27:8d:d1:05:cd:63:73:f3:6a:cb:51:c4:1b:8c:e9:e4:a5:ef:dd
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:e9:d2:39:d6:b0:49:fd:08:60:47:74:af:b2:cc:b2:10:9d:a0:af
Fingerprint (sha256): 89:d2:7a:6e:47:16:81:f0:a9:eb:ff:1d:a8:cc:b9:6b:43:96:b6:b0:9b:6c:ec:6c:94:db:0d:a8:dd:6c:35:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rokxat.eu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rokxat.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rokxat.eu
www.rokxat.eu

Other certificates including the domain name rokxat.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for rokxat.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272956788396372695018866617218088188473020
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-31 22:11:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-01 22:11:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rokxat.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 868696152833521372401861579012653657258415357684786890194686572196361600695831939839355411985871447168657002454866966331509118259118174536896840227074060142348342784241879566129563085001291768566944828553967544064127994290919397223506331623002439073553217212560972634483758854421895264570829531101091916716369422797451488288552277558867602461491269187675680019815897389273711394841479984357528741815499196794598581245203556054014143841404904386587829747988860206644485791466008726755076861414531454709496890003049048022445760816002056127299556834774024175761314335081295217963040753515425857764671138059769426051248620872620901510509216042283576535838077643371088612339066197140344482218553183795949573953028281457303710267318316085820787658978960513048725971563499860325766376276491137007819346182606479031085172539661445671457533387417651457465386307828023451044846897301710407276603382814210987114293374058327128176596524949202929770270256411233717036172059353889756564996858166819471322314272799612035487736171700516647106632856126045506747006174865961689377839485106199529141323956148184340024549848268888674540612664724100422317508661095243040668594746677440063878172733018718967424092863299914987625086853836461816872164158063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81278dd105cd6373f36acb51c41b8ce9e4a5efdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rokxat.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rokxat.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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