arkotec.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f5:d1:40:28:70:2a:62:13:b6:0f:61:a5:08:c1:1f:96:cd was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arkotec.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:d1:40:28:70:2a:62:13:b6:0f:61:a5:08:c1:1f:96:cd
Serial Number (int): 344984179469211712420694219395036121896653
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:60:39:e2:b2:a3:43:b7:08:36:20:39:47:71:7a:38:36:5c:c7:df
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6e:bc:b7:1d:39:87:29:e1:ea:35:00:00:bd:1d:32:ce:ee:4c:d0:63
Fingerprint (sha256): a4:8a:a6:59:ad:8c:90:a1:11:8a:aa:99:82:2c:aa:ab:31:2f:4e:25:fe:ba:12:ab:58:17:5e:c3:ca:91:59:02

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate arkotec.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arkotec.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arkotec.com

Other certificates including the domain name arkotec.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for arkotec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344984179469211712420694219395036121896653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 22:09:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 22:09:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arkotec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 966574885214945885679837377381644723487124052020440723696276881914646646153124235176637922241897531227640492342788042052454384934642955401735253830859386060637622650512596960718215813998251419969658710180107377716662567855564194091626658798666806711740508177699223283896282572010750372316276790370998867402820153594848671372507126148940199394767221708567755835719800984641866548764589928442161398914180083072060050035830715104568126934937371852080705491022482023407513373539909071127815992263338838751327107875873066280442870013825384921646665978104715297432250220818514456738430895812679067615515385468962906878541744740191485655631457627269969588493061806849762143379335392890476366019744721169065073297753308053711839609433859757202400519323833126043698781222230265695915028121429225630666459185539684897812843947422126013617877418351592488491691835677054351530209217185134839694088298453067918306089030269289429964474067613295863252609449981732255997895079111136007972188885888172626958196487273936015755056084948480353316820651888940194413263732332480144832613535333355700185518150149923020197168210413481300243214178702120032018788068622465776509485659065327580642162921402137339284451216762744637636279645383125834435926616231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							996039e2b2a343b70836203947717a38365cc7df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arkotec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c74e43a2200000403004730450220519934b049d6c561154e7409e31cef0042a5ab119bfb764661c6d23af0bb9ba8022100e55a606d53aed6451b2c99812ab5f8b09dc1e596533b21bccc69a2d73c382d9000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c74e43a73000004030046304402206219a8e01b1288df326a8da094fdf3148324e784ce8c800340e9eafa9bcaffb802205c78b9e61236c53e8f0fdb3f26730b38c0c53521cae5c23adcf91971d60aaf52
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00225f85bad9b0e61c9eed0cb81771cb217bf02fee97a669586bf66233448976c85eb3775d497ea7ee77a6e339c0f62dc70406e1d4328c3585d1aafce83121790eebf22b0b1d973cb2533205a1ea8d07de0be3e767f4ca23aa243bb189cbd38eff02cf60d8706b693affa2209385fe8f8801abd040c4b2206a5cd475d841785793179ef11ec6ec26ba9a2da910955f20780cf2b44effb9f7d9659828506c197cadaa9e33b1bb0b6232b8d611172ed623e9a1f6e92cae0b11c009b2322b522f45f7457e75cb191225aefa9ba0bf798d7887d15e52bf5dc712087616cd39c696660bd10a05bd832317a84452de7af01f54aef67644b8215ef50c11f1110fc13d3205