ckut.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:79:15:ab:5b:4f:51:e0:5a:22:e6:fe:b6:90:06:21:91:74 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ckut.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:79:15:ab:5b:4f:51:e0:5a:22:e6:fe:b6:90:06:21:91:74
Serial Number (int): 389652113647132471636184215747881162871156
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 8f:8d:f4:8f:a4:81:6c:ca:79:d5:91:e7:80:fe:91:58:e7:cb:a0:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e3:69:8c:a6:5f:cd:58:47:d5:e6:82:8b:b7:0e:c2:8f:19:ce:83:a8
Fingerprint (sha256): a0:88:57:97:66:17:1e:8c:51:92:3c:19:39:7d:b6:87:b1:c6:2e:f9:09:4f:70:c1:2b:39:ef:a5:82:df:46:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ckut.ca

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ckut.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ckut-ca.aegir3.koumbit.net
ckut.ca
www.ckut.ca

Other certificates including the domain name ckut.ca

(limited to 100 certificates)
ckut.ca
phase.ckut.ca
secure.ckut.ca
secure.ckut.ca
icecast.ckut.ca
icecast.ckut.ca
ckut.ca
icecast.ckut.ca
ckut.ca
icecast.ckut.ca
ckut.ca
secure.ckut.ca
archives.ckut.ca
secure.ckut.ca
ckut.ca
ckut.ca
ckut.ca
ckut.ca
ckut.ca
ckut.ca
archives.ckut.ca
icecast.ckut.ca
archives.ckut.ca
secure.ckut.ca
icecast.ckut.ca
icecast.ckut.ca
secure.ckut.ca
icecast.ckut.ca
secure.ckut.ca
ckut.ca
secure.ckut.ca
ckut.ca
icecast.ckut.ca
secure.ckut.ca
icecast.ckut.ca
ckut.ca
ckut.ca
secure.ckut.ca
ckut.ca
ckut.ca
icecast.ckut.ca
ckut.ca
icecast.ckut.ca
ckut.ca
ckut.ca
ckut.ca
ckut.ca
www.ckut.ca
ckut.ca
ckut.ca
icecast.ckut.ca
ckut.ca

Certificate

The complete raw certificate details for ckut.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 389652113647132471636184215747881162871156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-15 18:55:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 18:55:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ckut.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 781905864527897272887609518492522136323051419613179063613504969378798721765325657055707980874503169410428226089080058501888040309910932151850366066210736084261993159910001895366421188188578407406694671703074989826406785789755730129682019086790433380020194702796070180444175048749927834939615357302739271777187955737952317477966363848119523932227085545005084568052917208188662502390265319359091695099446699869327343381667422955333706381052464217517384159315596628102826980992849428854382768406221986755192201497892348655031726320213241630971483054836414840352198469711297220162754351659165071681259151283652477338926445110267263302481363282251448455872819848004720891922202858314535001944563227640568058574209957324643834629061339076184252540363152858439530247439132644309415857694218041458403392502107588003952252364095259944286044501149270402531438690102631380866599936495041946380533334196589893478606166830164284066325612418845247599599657684889020433580399152870016848529400330444329186588004107915357757467817270688783779127738638368477907340685593517624794442552839825184572697142144519106718496553731026485878190386799615603877863071562398973074812075370481081330355138128456562828074677557161566689559916683522648747636018201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8f8df48fa4816cca79d591e780fe9158e7cba0d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckut-ca.aegir3.koumbit.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ckut.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ckut.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016bf7340d840000040300473045022068210bc8c8148aaf6e8cb87b587430052a74aa99e7880296133e8c086c49a2d6022100dba20777e6f74a2b109ccd233d99c26707a186890583ebb316d7b5ccb207341b00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016bf7340d780000040300473045022100a1d689027203e3b73f67490a8535191f1bfc74e2b03e2efa1772b5ff451f97b902203b27533f93df650a4ae0ac4fab31dacb38fb6b3e565f79a42c27b1a1b0b9be92
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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