rkoco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a9:56:84:76:39:3a:4f:3f:5f:8e:f9:13:87:06:dc:f0:42 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rkoco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a9:56:84:76:39:3a:4f:3f:5f:8e:f9:13:87:06:dc:f0:42
Serial Number (int): 318959579193600554056690096829448176070722
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c7:29:2b:a3:ff:bd:f6:de:dd:c5:0b:f0:8b:d4:e3:3c:45:6d:81:ff
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 78:dc:20:22:88:ef:66:14:0c:cd:ef:1c:88:3c:47:f5:69:0f:ac:6b
Fingerprint (sha256): 98:f4:24:70:ad:cb:5a:00:44:62:66:a4:5a:0d:7b:b9:a7:75:4c:37:73:0f:01:db:35:3e:cb:5b:78:da:e5:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rkoco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rkoco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rkoco.com

Other certificates including the domain name rkoco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for rkoco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318959579193600554056690096829448176070722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 11:21:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 11:21:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rkoco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754832540971513908078328754145131398320032509998680992556434032438296463261082605185071615442938673600287946079822613560236776395405715183385470450543101371166474244979194115030229726830702097494390777684599186070833926701650135201817697145517394927040499228292354951735377126253766426003453995146024105876653447196019381597014217935602806130014035050359635365844927567821046463929324173453941168050278253992677548227167808060132940188533305911193889045847095128495738687510306177733296765187744847421976810321040377040197243446031947146628534343213912954016775532840238697563839142351541207757367991755833091505393723240303828293880160769433729987712069364891679537714547034869757473594235208705598518377424733794369332904348945358076615660165130185144762848388976239479983583514159668267313780636442968030270297797614536584081664651466341319424478710008074209413965175457390184607843458052899483095808412343800661411432672471870073462160416076928786097981997157360540312299626917423079072167158300328030964815402805204675953071715953852075503708780718808040137464693514591201005621477596902654991235127968127740156818332209539935879499199791596010182414127860372658749315617571284056271303064019326125805579258255337745568053461111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7292ba3ffbdf6deddc50bf08bd4e33c456d81ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rkoco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001707c4b7c9f0000040300483046022100e5437f27ca4ec2b54e48bb21ddbbb2cf56eace2e70e323aaec7dd66f798fcc48022100f63d26eb7beb821540e61db17641314a979932d489661eb73f821e633879320f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001707c4b7ca50000040300473045022100f36cf9aee1236e39ce5983f16da4eb48d605e43be8370e0395f76f23f75550bb02205f002390a276609f4f156b74498d866a1d2c129ad9b125dfe55d384a6c0515a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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