sakyaco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:75:bc:25:70:d9:cb:d8:64:01:6c:e2:14:11:ca:f2:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sakyaco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:75:bc:25:70:d9:cb:d8:64:01:6c:e2:14:11:ca:f2:9e
Serial Number (int): 346223663745300771264633847476313597342366
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:2b:a0:4e:b7:90:77:66:ef:e4:c1:5a:07:23:4d:a3:a3:4d:a9:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:68:a3:63:fe:af:44:e9:06:c5:8e:37:82:9b:02:b4:c3:39:b7:47
Fingerprint (sha256): 92:86:62:68:ee:7d:14:f3:61:0f:ac:f0:f8:da:0e:0e:46:ba:31:e7:ff:8c:78:34:59:f1:c9:af:26:67:ad:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sakyaco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sakyaco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sakyaco.com

Other certificates including the domain name sakyaco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sakyaco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346223663745300771264633847476313597342366
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 08:21:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 08:21:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sakyaco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864908671824468810106860379138896758374538825970345748915194702742817945647047443797356712194107588755789025342311727792503269236964600425262021568170405432412953306080068327203661233380271132492062218704565495373715990362301102860709423775378886862537419501079850293100513695958353572207232734125617740172072271937445104385864597163341856147760397716674897000011680406463549241850281366322292110428208374504373112351409584225046787850143603177691775617570090143392412437730493806205685902625369577398321837592719549847185117764786309895268472830748947694998894701606782085837326968602309945050180966583075385722060105393364944068399092150070931514332467566831750436891359023666150624504018027330483051441423716080688042333729704027409646574452785456321826902744796844847239862943469639845623983013852667592955717367440249494294902919830111446772937939224684519059273942043296262633643265543415626450864536807175530497676047208195778118562106861887530650243716803058277923203102783100120398974524185296891522331064578639028397237981668472522054928931061684271003586539338371096706832827768269483050479745377547234115814760997436557313038517121693191953210829331860902050642205163620232478822632330824316632105560393120223473734732111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a32ba04eb7907766efe4c15a07234da3a34da9e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sakyaco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170f21911090000040300473045022017069c015725555f88a5304c7d302e3ad34a5e208fc7406fc34b20984986bb39022100be73dcf08af458172e01a3dfac290d94031c04babfbc8ae935c533e37f953507007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f2191104000004030046304402200f4699cf5cf860b96f9d0c27f709f0855c9d9d16a4f562d02be225002d8a350402206c6bc5665224d72a7d68eb72bbe1add22c1eaa8b01064af49fbfd794f658e04d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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