kgo.life

Issued by R3

About this certificate

This digital certificate with serial number 04:08:f5:c1:25:9b:67:13:2d:a9:e5:6a:98:3d:85:29:94:be was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kgo.life

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:f5:c1:25:9b:67:13:2d:a9:e5:6a:98:3d:85:29:94:be
Serial Number (int): 351498066397430916570861805888588760061118
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:4a:c6:b1:c4:bc:e9:85:bc:52:55:43:60:8f:a9:83:0f:2f:2f:67
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:d3:b2:46:a4:cf:4d:bc:d1:bf:89:86:0d:e4:a7:57:0c:4f:3f:6a
Fingerprint (sha256): 8d:68:da:ac:4b:e9:74:41:67:01:f0:7d:9c:10:6e:4c:07:4c:04:ed:5f:a9:05:a6:de:46:7f:a7:ab:93:1c:b5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kgo.life

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kgo.life

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kgo.life

Other certificates including the domain name kgo.life

(limited to 100 certificates)

Certificate

The complete raw certificate details for kgo.life in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRqXdk0cd3VdNyjS5UPD
qy8xv+ycIOqJ1V8m8Ju27edmHaiehUfOHlDBdBBZHgh8VESpHcAJk1ENaN1WewSE
FCX0GRrIQ8bcQQw4DskG1IBzetth7mpm8Sqny8vhNkPQ87CL4M51TqtlyCve2yPz
LwH7ZX9LncqUq0XGnnAbfT8R+65jhF7HOl0aG1YLJ5tDdh5+iTrAcbJvOaqywO+Y
YrpBnqtxQugxFUrMd6OykE16yhXE/r503+4yIoHW/xXAuN9/ijUhVEckwcwvtLh5
e/wCi5EimmfFv1vJOWboCVF97nAxZe+bclaXU9KWJtGhmfY+g7+93rn425FOTT1x
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351498066397430916570861805888588760061118
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-07 22:36:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-05 22:36:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kgo.life'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20842433150185921648002826779231166606356059188808344337088898397889008780824000310437044212591247870337471069484870929798044687370092688301692584105562313713333107439523646217704291183141159724883626973883896535532649265038516251269772158163954685469827443094402074247965192456035968559176805462990287513719080313759198848095180466758643615798242423171855088002269672541425739054149696600429656725969495141157617259769995833859024822948501989156151884519482382853796369298792641063756926784559772151907044414168800147626683330024875655090504760280382261922390780721041722645085024704853778563538922196053601323675963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							444ac6b1c4bce985bc525543608fa9830f2f2f67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgo.life'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189d25c61300000040300483046022100b83d60129a5516064936a2e5fa302c44e80c1d3f95c927a049b6be319738d3ce022100e060e0356b03cabfff44089ccc4b210af4742b99bca27233fb9cb2b7f3b50638007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000189d25c6155000004030048304602210088a12d47c6eedf7ddd7f84e2422e371c101345295b498a336240b5ee17473d88022100be62f246ec77d047249658eb8ec0c09b98f1567397810271cd9046a6f9ce8210
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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