arkotec.com
Issued by R3
About this certificate
This digital certificate with serial number 03:f5:d1:40:28:70:2a:62:13:b6:0f:61:a5:08:c1:1f:96:cd was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=arkotec.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:f5:d1:40:28:70:2a:62:13:b6:0f:61:a5:08:c1:1f:96:cdSerial Number (int): 344984179469211712420694219395036121896653
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 99:60:39:e2:b2:a3:43:b7:08:36:20:39:47:71:7a:38:36:5c:c7:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6e:bc:b7:1d:39:87:29:e1:ea:35:00:00:bd:1d:32:ce:ee:4c:d0:63
Fingerprint (sha256): a4:8a:a6:59:ad:8c:90:a1:11:8a:aa:99:82:2c:aa:ab:31:2f:4e:25:fe:ba:12:ab:58:17:5e:c3:ca:91:59:02
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate arkotec.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for arkotec.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
arkotec.com
Other certificates including the domain name arkotec.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for arkotec.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgISA/XRQChwKmITtg9hpQjBH5bNMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMTYyMjA5MjNaFw0yNDAzMTUyMjA5MjJaMBYxFDASBgNVBAMT C2Fya290ZWMuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7O0g kJuT7/Po96VsXibEzUMqYsZzWG77AOyqUXhyrqml2mTcmJ33VzF/tuwf5Z0Ry3ZG MizoCPiTCujmMxOE2jgb24BdohSeJQDzUcOGwnVFAVm4bhPnVTHYJlrrqqzyJxaX Be+l3yWT1MBdwNWVQMTfsQeVvec19e+fz8doliQLzZrmRdYx1ev9LvVOzD9AxUSb S5iXfWM2I4/Yvvdlsqoh27n563ukoc6jhdrqs8UgXP8ZR8WT0HP8/DXfb0YBZOx9 msQGVjc2MryqZ2bFJKWA8hDx2si/pXMr3Dcu0qgi8Nm7+OMKnypY0qDFhL2k6Vd/ zeCTtIgvieAtpLb/FPp5FYkQrUxBzLTbPjxCQk3B/BTLEgI6g60UZTlXtpJq6oJj Zhz0bDoKX0SorC0q+EygjQhUJ3WHj9zOHnS3yESiZynrx9XsB4+KIa/CzSqZfNQV u/6E9nOpPqfGnK6TNJ/zBAfSLccwuHqruaHdsvfH/u1B/2QZzLqTSp4ZHfYJR6mW gR85SwLvgMY0KmF1E7SYYefK9TGunN5ifmGjDJw4cCJ3uWKh6TXgZKafiXs2MeFK 3llWlc5CJWAthj+IdwGfKlIjbI2mTePSRAk91cBHvYVWSvneMVPSq+eK7vW9M5jF hiuCPcKG01upis2XoJBUUMZIoLZVU/FY7iSm6KcCAwEAAaOCAgwwggIIMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUmWA54rKjQ7cINiA5R3F6ODZcx98wHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wFgYDVR0RBA8wDYILYXJrb3RlYy5jb20wEwYDVR0gBAww CjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgBIsONr2qZHNA/l agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYx05DoiAAAEAwBHMEUCIFGZNLBJ1sVh FU50CeMc7wBCpasRm/t2RmHG0jrwu5uoAiEA5VpgbVOu1kUbLJmBKrX4sJ3B5ZZT OyG8zGmi1zw4LZAAdQB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAA AYx05DpzAAAEAwBGMEQCIGIZqOAbEojfMmqNoJT98xSDJOeEzoyAA0Dp6vqbyv+4 AiBceLnmEjbFPo8P2z8mcws4wMU1Icrlwjrc+Rlx1gqvUjANBgkqhkiG9w0BAQsF AAOCAQEAIl+Futmw5hye7Qy4F3HLIXvwL+6XpmlYa/ZiM0SJdshes3ddSX6n7nem 4znA9i3HBAbh1DKMNYXRqvzoMSF5DuvyKwsdlzyyUzIFoeqNB94L4+dn9MojqiQ7 sYnL047/As9g2HBraTr/oiCThf6PiAGr0EDEsiBqXNR12EF4V5MXnvEexuwmupot qRCVXyB4DPK0Tv+599llmChQbBl8raqeM7G7C2IyuNYRFy7WI+mh9uksrgsRwAmy MitSL0X3RX51yxkSJa76m6C/eY14h9FeUr9dxxIIdhbNOcaWZgvRCgW9gyMXqERS 3nrwH1Su9nZEuCFe9QwR8REPwT0yBQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7O0gkJuT7/Po96VsXibE zUMqYsZzWG77AOyqUXhyrqml2mTcmJ33VzF/tuwf5Z0Ry3ZGMizoCPiTCujmMxOE 2jgb24BdohSeJQDzUcOGwnVFAVm4bhPnVTHYJlrrqqzyJxaXBe+l3yWT1MBdwNWV QMTfsQeVvec19e+fz8doliQLzZrmRdYx1ev9LvVOzD9AxUSbS5iXfWM2I4/Yvvdl sqoh27n563ukoc6jhdrqs8UgXP8ZR8WT0HP8/DXfb0YBZOx9msQGVjc2MryqZ2bF JKWA8hDx2si/pXMr3Dcu0qgi8Nm7+OMKnypY0qDFhL2k6Vd/zeCTtIgvieAtpLb/ FPp5FYkQrUxBzLTbPjxCQk3B/BTLEgI6g60UZTlXtpJq6oJjZhz0bDoKX0SorC0q +EygjQhUJ3WHj9zOHnS3yESiZynrx9XsB4+KIa/CzSqZfNQVu/6E9nOpPqfGnK6T NJ/zBAfSLccwuHqruaHdsvfH/u1B/2QZzLqTSp4ZHfYJR6mWgR85SwLvgMY0KmF1 E7SYYefK9TGunN5ifmGjDJw4cCJ3uWKh6TXgZKafiXs2MeFK3llWlc5CJWAthj+I dwGfKlIjbI2mTePSRAk91cBHvYVWSvneMVPSq+eK7vW9M5jFhiuCPcKG01upis2X oJBUUMZIoLZVU/FY7iSm6KcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 344984179469211712420694219395036121896653 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:09:23 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 22:09:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arkotec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966574885214945885679837377381644723487124052020440723696276881914646646153124235176637922241897531227640492342788042052454384934642955401735253830859386060637622650512596960718215813998251419969658710180107377716662567855564194091626658798666806711740508177699223283896282572010750372316276790370998867402820153594848671372507126148940199394767221708567755835719800984641866548764589928442161398914180083072060050035830715104568126934937371852080705491022482023407513373539909071127815992263338838751327107875873066280442870013825384921646665978104715297432250220818514456738430895812679067615515385468962906878541744740191485655631457627269969588493061806849762143379335392890476366019744721169065073297753308053711839609433859757202400519323833126043698781222230265695915028121429225630666459185539684897812843947422126013617877418351592488491691835677054351530209217185134839694088298453067918306089030269289429964474067613295863252609449981732255997895079111136007972188885888172626958196487273936015755056084948480353316820651888940194413263732332480144832613535333355700185518150149923020197168210413481300243214178702120032018788068622465776509485659065327580642162921402137339284451216762744637636279645383125834435926616231 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 996039e2b2a343b70836203947717a38365cc7df . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkotec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c74e43a2200000403004730450220519934b049d6c561154e7409e31cef0042a5ab119bfb764661c6d23af0bb9ba8022100e55a606d53aed6451b2c99812ab5f8b09dc1e596533b21bccc69a2d73c382d9000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c74e43a73000004030046304402206219a8e01b1288df326a8da094fdf3148324e784ce8c800340e9eafa9bcaffb802205c78b9e61236c53e8f0fdb3f26730b38c0c53521cae5c23adcf91971d60aaf52 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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