dkgf.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:c5:1a:d0:41:36:48:7e:34:c0:45:92:77:ff:b3:10:b0:d2 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dkgf.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:c5:1a:d0:41:36:48:7e:34:c0:45:92:77:ff:b3:10:b0:d2Serial Number (int): 415520411258760227453221734248488763437266
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a6:80:30:f7:e3:aa:fa:3a:20:76:b3:f8:a2:a9:30:81:65:2e:34:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 5b:be:bf:f8:8b:03:66:a0:43:b0:a7:f4:ad:49:5a:16:63:83:a3:d8
Fingerprint (sha256): a2:68:5d:9c:47:e5:2d:9d:84:2d:cd:a1:5d:36:3f:97:4f:a6:c8:06:d6:5e:3b:ad:76:dd:b9:1d:c5:93:40:60
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate dkgf.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dkgf.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dkgf.org
Other certificates including the domain name dkgf.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for dkgf.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgISBMUa0EE2SH40wEWSd/+zELDSMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxMTE5MzdaFw0y MDA1MDMxMTE5MzdaMBMxETAPBgNVBAMTCGRrZ2Yub3JnMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEA3+KuycXhm40/9dbmNc2Xp6X/y/QyvXG1QpN95NSA 0mi0T8zRuRiC16ufsnpCYEscQGhy5SfVbb5AY9R5w/917kbkT9k6ih5FhEVqkMhk hMAhFRIvp/kpqh3uBY7Cd0IYYlYDEOeS3VgbIKmVzH+oEREXNyokV+xAuQeKIPFK 87dxBOp5nh5fWX2hfJpqInCfFabjBPot0D8QlTeVD7qBsR4wt5J8UH5tMe50Jg1Q LdJYK76pm+Mxl9TXF4fbHjn95xv7qK5rUycQNwcOBnV2cCRfspqIV8HC3bMXwtId Ub3tDUv2OjqMLLfwFF2FkK4nCilQgHASoSplGOgXgS95hWlucKRuzj3KOcaJEp2n 0BnPXCw5waT+SF5FhqmwpPsukJmNHl6Y2rll06LkSu56MSKd0b2CMOTUEc+tp0Lk wv7BSnR4Fa4A2tY1AvDavBG4PGhwwheOagFIy1Q0xaWPsO9o6xUkL8nRfc65e+lP eR4Do7cFuHqfHb0bDiK3wQNWP0YM/YWxaiacgdJDNc15Sgt4J9851mIQBQKFN1Hc Z2htJV6pZLyFhnm0P12Mfsxhx/SdcQdmwWSA7nWAyEnYpzs5Qpwwb6EXG/67MMzb 8n5s3LJhNxwkgVC78q4rws2ZYJGaGESfXp8c3c8ojZf/u/FUCjepAgYkqBZAKaN0 O0ECAwEAAaOCAl0wggJZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUpoAw9+Oq+jog drP4oqkwgWUuNA4wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghka2dmLm9yZzBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AF6nc/nf VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABcAr96LoAAAQDAEcwRQIhAMGC GbqBLNzB5zi0Snre42EPD5GM4zi+Ln0FxHj8lLXKAiAo9FMPTNjntnpr7wYpWRZC NorSLE+7oPpCKEXKME3bpQB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3v i5BeAAABcAr96LUAAAQDAEcwRQIhAIDj6iF6imgO44SJPtx/5ZyFdRsH7mXMBikx 9aqdS0hIAiBS8+OyZnVhq27/o3ihyI7AKT/fiYBGB0/epD1YW/aJ9zANBgkqhkiG 9w0BAQsFAAOCAQEAab6agnuKL9mpat6h42jw/yHCIiNWbM0jiXEgI6o28ZsMrDYv S9QXj9DYM67+Wx0br5Mjq+Fo9hMWOK9W0pe5M1Sl1RFLQn+263hyRJT1UVH1R67H J9v7XeBdVYP0u/9mhBSyHsEzGLm+N5DuuBTMsMLsn4OCqcqVwg4JjteF8i2wck3k OJSVrj1Xwwc8GKlfwMFbc565we6+bYMjEdOsbfVSliSzKMjwVW9DLpBmu/D42oDb YlB8ZQHk7d1/7yy+4M2WrR90z86Nk3GlRRdpg1QgCxCz1ji91T2TrlAY5RLGrfi6 nEL6ql4IYuoGlYSvTJb+BGGJfC7J9iSXMB1VnA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3+KuycXhm40/9dbmNc2X p6X/y/QyvXG1QpN95NSA0mi0T8zRuRiC16ufsnpCYEscQGhy5SfVbb5AY9R5w/91 7kbkT9k6ih5FhEVqkMhkhMAhFRIvp/kpqh3uBY7Cd0IYYlYDEOeS3VgbIKmVzH+o EREXNyokV+xAuQeKIPFK87dxBOp5nh5fWX2hfJpqInCfFabjBPot0D8QlTeVD7qB sR4wt5J8UH5tMe50Jg1QLdJYK76pm+Mxl9TXF4fbHjn95xv7qK5rUycQNwcOBnV2 cCRfspqIV8HC3bMXwtIdUb3tDUv2OjqMLLfwFF2FkK4nCilQgHASoSplGOgXgS95 hWlucKRuzj3KOcaJEp2n0BnPXCw5waT+SF5FhqmwpPsukJmNHl6Y2rll06LkSu56 MSKd0b2CMOTUEc+tp0Lkwv7BSnR4Fa4A2tY1AvDavBG4PGhwwheOagFIy1Q0xaWP sO9o6xUkL8nRfc65e+lPeR4Do7cFuHqfHb0bDiK3wQNWP0YM/YWxaiacgdJDNc15 Sgt4J9851mIQBQKFN1HcZ2htJV6pZLyFhnm0P12Mfsxhx/SdcQdmwWSA7nWAyEnY pzs5Qpwwb6EXG/67MMzb8n5s3LJhNxwkgVC78q4rws2ZYJGaGESfXp8c3c8ojZf/ u/FUCjepAgYkqBZAKaN0O0ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 415520411258760227453221734248488763437266 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 11:19:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 11:19:37 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dkgf.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 913373068586082313046789926662975156081985264200264977072081970210875509729720195022205574206674346605397893137788553862777080160581250601783584901498889046428562234982108054886715675300489952667992098584917044056704504606143209483533459203230668086425811853760160183886866530474107596861347072298522721169621449473718865847714881192136471077132063798924992768379556186183770249139033062124360750626293470785819205497774140720868867400001887461082330248268335673881693346428602919600455991834385835518120150589005486606774026602198795938073079369544509671753823301634916472245916174650637553699482421136839430946840601570703944345869686673141282375232871250182450005824117201491619107813786759745655471126167250417652576971112231881254631626891074545996271699962629180141057414642351733988930182128950574835430742508760026586521975297762953495016519345208311848186309251809120464553199404927407783244453087173532462390571919506606370065376658074008931725707937301303413497555226104900927432023426299904215998874762166700566265099398658518227490758320278851348245882853966730932537709672510969955977644149910333424770691100345330836540668377794617299275025971027683366740979304358834784958476207569759689914227925249354848824009702209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a68030f7e3aafa3a2076b3f8a2a93081652e340e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkgf.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001700afde8ba0000040300473045022100c18219ba812cdcc1e738b44a7adee3610f0f918ce338be2e7d05c478fc94b5ca022028f4530f4cd8e7b67a6bef0629591642368ad22c4fbba0fa422845ca304ddba5007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700afde8b5000004030047304502210080e3ea217a8a680ee384893edc7fe59c85751b07ee65cc062931f5aa9d4b4848022052f3e3b2667561ab6effa378a1c88ec0293fdf898046074fdea43d585bf689f7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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