okyadong.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:16:af:89:3f:14:4b:e7:ce:c5:a0:ad:65:97:5f:e4:70:96 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=okyadong.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:16:af:89:3f:14:4b:e7:ce:c5:a0:ad:65:97:5f:e4:70:96Serial Number (int): 269056397390873225579603752180270034612374
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 01:b3:d5:9e:ef:4e:2e:d1:7e:89:2b:ca:c8:2a:05:52:4d:d1:27:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8a:10:2b:0e:a2:cf:5c:67:5f:4b:5d:04:fa:c0:4c:1e:53:65:ac:95
Fingerprint (sha256): 99:f8:4b:dc:3c:58:c2:44:40:00:4f:70:3d:5b:49:2f:50:4d:09:97:4b:c5:52:3c:f7:ef:96:d3:67:c8:04:06
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate okyadong.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for okyadong.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
okyadong.com
Other certificates including the domain name okyadong.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for okyadong.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISAxaviT8US+fOxaCtZZdf5HCWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDkwMDU4MDRaFw0y MDAyMDcwMDU4MDRaMBcxFTATBgNVBAMTDG9reWFkb25nLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAKR0w4a+mgY/+usfZdWARvGLrTW9JqUAEdZD 3UftUmANBJAVVho1xbbVK7F2Zii2aQKGGKCaQCjcsP0FWBIroeSCIPGRIAaXq69C PsgOyeIhtpHgSKTRigWbE4HLAsZPtV1PQ7Wbx9EzViPqaGKE227ntul2tee/bcZ9 umX0A5vi/6l2dlkkQePIrRYGxxmMgEIlHq0zKFFfwWnZMDkjfqqM68M4Qi306eyQ mKK18m0aK75ER5tfJh8KZb4qF/cjjAphmp00xb1ddZcc149DnSC/MILyS3b4Iuld 2csKwbFNpgM75FZn8VFElu1R+GsWRNjU59Xzt+sUuL0jrZnsRBt2FMT0J8qOJ7JS 526BJpEv3yUw5DU8kXIG4tbLEOcwBb6tBz9FYknxJuTHtrCHlootoi06Nww88x9H D3N5AvlcMiU8kWv+Xu6PRbLbmamHAHi1Rpo0/xyO+aN03lcLlwGTfpHOfqIAFZq4 1cf5y61qnmaW+ZRfbSIORbn38b86nfqZhaW33Q2C7LFHRLyjXvH7f/fnSLDd+pfP K80w3c83sVmfilxWQMrhOrRfiC6ki0aWt9wk0fVKcE3kvBkmbK6UxbRfpCYgoWZ4 Ax8PgENuikUDOTIi5ssu+GdFsfDkQ2q0E0szvmnIiZu2lG8EGgsMWGsZ4r9+9Lqt SOkIVnSTAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFAGz1Z7v Ti7RfokrysgqBVJN0ScRMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMb2t5YWRvbmcuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFuTeH2wgAABAMA RzBFAiEA18+4cnEqXcAYrud3HhmcIwZ5IT9n8fAK/jNsmMn1ftsCIFlF4UOMb9hu xWTU8c8WHiZaaPEermVBzOqm/Nr2bfVYAHYAsh4FzIuizYogTodm+Su5iiUgZ2va +nDnsklTLe+LkF4AAAFuTeH2sgAABAMARzBFAiEAiX0LzuZ97MYf6jTka4VDk0+o 3W+M6mJcgWfqFKaNdCUCIDremzFVwg/RLk/bfehIxuOo6d8w2kcErWdKVNsbfzbJ MA0GCSqGSIb3DQEBCwUAA4IBAQByTyezD2Tp/KoVrEsqqMImDVPXvHq86ucyiQKH dHoTmnmc1b6HRRcIvB5zVa/tPYWz5MHvxJoEh9xeCRL3vumNhENq60tpo/M4j5n3 THQh0r+5rlC8CCgPHsTWN5rYeFfZ+95JOr4M2lifgLBCkwCJuLjxlV9TuNQbxPZh VOoVqXkoWFOhsh2yR6+eInJ4g6xNAr5Iivp3gL6SA1SHeaKfI4kDE75wMrkEoFxi I7WieXeyqWGzdHK8ptTo3EATyqWkF/WwIk/dN8Dy/BmhoHbfEefXXWbl1UzEBDTQ 7lcUpqvqa5pqtO8ykYRg+bUErp+CIiITzy9XR5ErY6KJlaLu -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApHTDhr6aBj/66x9l1YBG 8YutNb0mpQAR1kPdR+1SYA0EkBVWGjXFttUrsXZmKLZpAoYYoJpAKNyw/QVYEiuh 5IIg8ZEgBperr0I+yA7J4iG2keBIpNGKBZsTgcsCxk+1XU9DtZvH0TNWI+poYoTb bue26Xa1579txn26ZfQDm+L/qXZ2WSRB48itFgbHGYyAQiUerTMoUV/BadkwOSN+ qozrwzhCLfTp7JCYorXybRorvkRHm18mHwplvioX9yOMCmGanTTFvV11lxzXj0Od IL8wgvJLdvgi6V3ZywrBsU2mAzvkVmfxUUSW7VH4axZE2NTn1fO36xS4vSOtmexE G3YUxPQnyo4nslLnboEmkS/fJTDkNTyRcgbi1ssQ5zAFvq0HP0ViSfEm5Me2sIeW ii2iLTo3DDzzH0cPc3kC+VwyJTyRa/5e7o9FstuZqYcAeLVGmjT/HI75o3TeVwuX AZN+kc5+ogAVmrjVx/nLrWqeZpb5lF9tIg5Fuffxvzqd+pmFpbfdDYLssUdEvKNe 8ft/9+dIsN36l88rzTDdzzexWZ+KXFZAyuE6tF+ILqSLRpa33CTR9UpwTeS8GSZs rpTFtF+kJiChZngDHw+AQ26KRQM5MiLmyy74Z0Wx8ORDarQTSzO+aciJm7aUbwQa CwxYaxniv370uq1I6QhWdJMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269056397390873225579603752180270034612374 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 00:58:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 00:58:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'okyadong.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670922387472392443002061248085584455769492937770575519378147854516388838470454145635713437061296125652288734880042206434012075593605060887525684800471456835887381047220944955368419564985940399735197812239637972020051535761001134770409244216519553136327691316213719241167615472706664120502305038483728658933972430547396216317745766967833416827094105619039873416148849801687773465536611128414511428978938880301395260359757858500509857841681895909570431989219048190571559023052016344187902981356685087181834670655684473882672227916193553815490120725434607533885333872235117365698519746869803499160488065488511028642088008332468290188108028534066293591176899693407757391695438194849105663769797165435967050835059601367641312701358820492341247679336249256667703113479932398872903918032906698108134080256226195056967809127613713192751114627609460876643922572887502730674256573544183940600544211219319971268048149247661949197070229274375729319627869270849028240706201381569246548003987068468643474846122865636422578371581101564696043215918684348799064742412181039899488920757979842234061451212095776425013347086596744486539570148042272376143161866695351326728981693543591654777567710993658875812316025659578147817685296356824912223209419923 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 01b3d59eef4e2ed17e892bcac82a05524dd12711 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okyadong.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016e4de1f6c20000040300473045022100d7cfb872712a5dc018aee7771e199c230679213f67f1f00afe336c98c9f57edb02205945e1438c6fd86ec564d4f1cf161e265a68f11eae6541cceaa6fcdaf66df558007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4de1f6b20000040300473045022100897d0bcee67decc61fea34e46b8543934fa8dd6f8cea625c8167ea14a68d742502203ade9b3155c20fd12e4fdb7de848c6e3a8e9df30da4704ad674a54db1b7f36c9 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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