dkgf.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c5:1a:d0:41:36:48:7e:34:c0:45:92:77:ff:b3:10:b0:d2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dkgf.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c5:1a:d0:41:36:48:7e:34:c0:45:92:77:ff:b3:10:b0:d2
Serial Number (int): 415520411258760227453221734248488763437266
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:80:30:f7:e3:aa:fa:3a:20:76:b3:f8:a2:a9:30:81:65:2e:34:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:be:bf:f8:8b:03:66:a0:43:b0:a7:f4:ad:49:5a:16:63:83:a3:d8
Fingerprint (sha256): a2:68:5d:9c:47:e5:2d:9d:84:2d:cd:a1:5d:36:3f:97:4f:a6:c8:06:d6:5e:3b:ad:76:dd:b9:1d:c5:93:40:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dkgf.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dkgf.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dkgf.org

Other certificates including the domain name dkgf.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for dkgf.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415520411258760227453221734248488763437266
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 11:19:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 11:19:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dkgf.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913373068586082313046789926662975156081985264200264977072081970210875509729720195022205574206674346605397893137788553862777080160581250601783584901498889046428562234982108054886715675300489952667992098584917044056704504606143209483533459203230668086425811853760160183886866530474107596861347072298522721169621449473718865847714881192136471077132063798924992768379556186183770249139033062124360750626293470785819205497774140720868867400001887461082330248268335673881693346428602919600455991834385835518120150589005486606774026602198795938073079369544509671753823301634916472245916174650637553699482421136839430946840601570703944345869686673141282375232871250182450005824117201491619107813786759745655471126167250417652576971112231881254631626891074545996271699962629180141057414642351733988930182128950574835430742508760026586521975297762953495016519345208311848186309251809120464553199404927407783244453087173532462390571919506606370065376658074008931725707937301303413497555226104900927432023426299904215998874762166700566265099398658518227490758320278851348245882853966730932537709672510969955977644149910333424770691100345330836540668377794617299275025971027683366740979304358834784958476207569759689914227925249354848824009702209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a68030f7e3aafa3a2076b3f8a2a93081652e340e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkgf.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700afde8ba0000040300473045022100c18219ba812cdcc1e738b44a7adee3610f0f918ce338be2e7d05c478fc94b5ca022028f4530f4cd8e7b67a6bef0629591642368ad22c4fbba0fa422845ca304ddba5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700afde8b5000004030047304502210080e3ea217a8a680ee384893edc7fe59c85751b07ee65cc062931f5aa9d4b4848022052f3e3b2667561ab6effa378a1c88ec0293fdf898046074fdea43d585bf689f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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