kymatic.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:65:47:22:0c:38:bb:e4:77:ce:5a:c1:00:92:95:45:cf:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kymatic.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:65:47:22:0c:38:bb:e4:77:ce:5a:c1:00:92:95:45:cf:fe
Serial Number (int): 382912214759733532849722465604238615891966
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a3:3c:aa:ca:00:8c:20:9f:17:f4:10:3f:99:26:fe:85:89:a1:f5:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:25:db:96:3e:79:52:a6:bb:82:2e:cc:2f:e4:b7:97:bb:e2:3d:77
Fingerprint (sha256): 90:43:85:22:31:82:4f:d5:70:c7:d7:7f:02:b4:0f:9e:b1:ec:f8:5c:f1:3c:d9:44:18:31:ef:f2:41:df:45:14

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kymatic.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kymatic.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kymatic.com

Other certificates including the domain name kymatic.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kymatic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382912214759733532849722465604238615891966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 17:01:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 17:01:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kymatic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 696056021421733301019516254357312015837433548330506841654328221845000720687812699491182743861905966871618691984340717505046192322600684287618834682179463931451487848545713114494942357689476826494757273736805861831721989944278507841222563753541846260550824545833344379184636912937645569995933199093292208513464717656649056361201643926498615831186570369269028113492544789419262660321118258340107210943568287430058829503878647409647491145092780494464704732719924695925370843459422404336412115083679754380817350903547407757704635390418863831711708867528503565837026800183078376599643483969109519603059191327471948500346942159031407201249773602984160946504891082799932266924411932999055100414924859052218663727287710220627849358790519526982798501723704364912777280154671231930657153709872837299934636058874132246848243164074692858772015488566141898358379460374247826876572728511006688297790142945087469331200615675826034309514859058948630719222661260083044546079550135080530452905629929501843627515778604125395709373458680246161167411234135848907273084135392141737218434780256632580988667960893904543636343544428138221216529294249336317861414052426504097937439847160014459807770824881092858615828560010762170578260872724959570304068746157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a33caaca008c209f17f4103f9926fe8589a1f536
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kymatic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167f0d3bb740000040300463044022028b0e3c98529b6f18165749c1c2f61e63018c43fe52359dcb7f5dab9d931755e022050b9d9329fe98a6cced3b06008321cc0b35190285e5cac47bfbbf9fd07c736de00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167f0d3bb6b00000403004730450221009a5ca55eaa514a9decb91700416333ce396ccfbb9a61e1eedddd6dba9b353a46022025b42eface3ffde519423a4fe1b4abad0154be48d958cd0ed83245676396ea49
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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