dkgf.org

Issued by R3

About this certificate

This digital certificate with serial number 03:cd:0e:11:4c:51:c8:e8:36:6f:83:27:0f:54:c0:88:5f:03 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dkgf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:cd:0e:11:4c:51:c8:e8:36:6f:83:27:0f:54:c0:88:5f:03
Serial Number (int): 331113442023003497635155443727515980947203
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:7e:9e:9e:1b:7a:24:3f:4e:f2:88:bc:37:11:a1:77:61:eb:fe:77
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c9:9a:ec:c7:de:e4:6d:02:15:b2:53:9f:2e:72:2a:5c:93:19:42:43
Fingerprint (sha256): 8e:ca:0c:cc:fa:a9:d9:5d:8a:96:d6:ce:e0:bf:35:26:e6:a2:2e:b9:08:cc:e1:1d:52:bd:b3:69:95:3c:32:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dkgf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dkgf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dkgf.org

Other certificates including the domain name dkgf.org

(limited to 100 certificates)
www.dkgf.org
www.sociologue.org
dkgf.org
dkgf.org
dkgf.org
dkgf.org
www.dkgf.org
dkgf.org
dkgf.org
www.dkgf.org
dkgf.org
dkgf.org
dkgf.org
www.dkgf.org

Certificate

The complete raw certificate details for dkgf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 331113442023003497635155443727515980947203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 16:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-11 16:16:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dkgf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752363884580212052748180134684045831571128884135651181256100167827785573105667524790377161378772010278069334517039935187739299608853704881127537769371922587013333220418886488945944555718762522607073680602701991642177951591263685416937915359868604216366298776591591053235844312830536053648105526184965427408261656560023865693555005596539086171504221125509147920543063620500374314600027292935779334518569969871709359015341550068296737829275912776036770178563784922208877092814302251141709279358123289139969844644638724399004280136941735335923445220162128105807666377752330255398578246293791258230731476284749245671645092220086769384499455003523297006219825131917973552316732180257519895702441370913101209440064097272465945253782210809859769745328002703397909297302453073939466911539470931216661189935908704586724616118950690862285161408478326148443048897215228713185471557423696270429554459797247464115149752001830003322434600724695634398085550645234549272059028073900193136088439180972423021445423149019956803684822309219954038645708176998784904492168192233093103228641982744952572882623969236725542008895541463314264608237465368915423862729827551558326912472685735945137846751337048229131352316689944697531441310370106361375720602349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							647e9e9e1b7a243f4ef288bc3711a17761ebfe77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkgf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f72f4c1ee0000040300473045022100cd36b49b84c05e8441cd61eaf22cd14d68ab23354c6189eafffc82519101afb802206e81d34b3b5571103d87cdfdf2b36243be2604e7e6ef2439b5217857fd6f4eb10076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f72f4c2040000040300473045022100d80fd08e4fdca05e3a033110972f7c940ae4766d927bf464259e7f7cca0221fe022029a9667ac03d94395e0fba37105a754b9feaa2a0765e0965e54bc66d97afcde9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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