mail.kromozo.me

Issued by Let's Encrypt Authority X1

About this certificate


This digital certificate with serial number 01:15:f8:ec:05:89:1f:0c:6e:b2:c4:51:b2:e1:97:71:88:5a was issued on by Let's Encrypt .

While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

mail.kromozo.me

Let's Encrypt

Organization: Let's Encrypt

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 01:15:f8:ec:05:89:1f:0c:6e:b2:c4:51:b2:e1:97:71:88:5a
Serial Number (int): 94589089674389143083040086894783157602394
Serial Number lenght: 137 bits, 18 octets

SubjectKeyId: da:72:94:4d:c8:b7:eb:c5:d3:21:fe:10:b9:ec:b5:2f:f8:01:ff:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0f:cd:35:91:25:3f:c3:b4:3e:15:72:6b:f2:1f:32:d3:85:48:61:19
Fingerprint (sha256): f8:78:b6:d5:87:61:63:a9:a0:8d:e5:7f:d6:43:0e:cf:b2:64:9f:c8:42:4b:61:d1:a1:ac:b2:95:32:37:8e:4b

Issuing Certificate URL: http://cert.int-x1.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x1.letsencrypt.org/

Check the revocation status for the current certificate on mail.kromozo.me
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: mail.kromozo.me

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgISARX47AWJHwxussRRsuGXcYhaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMTAeFw0xNTEyMjAxNzQ1MDBaFw0x NjAzMTkxNzQ1MDBaMBoxGDAWBgNVBAMTD21haWwua3JvbW96by5tZTCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBAJnUXXvegC5SafYz9enqOEwsVllEixMp UWunTdJK5ZNsz/WjBuD6ayWkDNsDfS85xxeztCPpAUHosZ/mZyg3bW/dJ9gSpJDi lnB1sRgDpJTIouLeAPPFIrOdUznw3LVjtD4OTDh3yJ7ApJWpvnrpMc1lUro1omv+ NjbcyDdYf52Ag4FqenuZskMAFB2rWKPb4I5pPmpYdNsHFhPD+TRxuGFTvQpq1sct y0QFwSpj6CatiJKl4MTbiCyMdO3q2r3O4Pp2IKXFKRwNXbvY5rSSVeGecvhfqsiq m38zOL4A8ya0suzoXAJaiJb8FUuI1LxM5wUx493Y/vFSx/gjGhO8NgyiSJDQ19l/ HN+CHgAOEMKYEDeOQscB9s7/SKOhAj9/lwvybL+avZnq2I3D4s43LMY+kjeZM4vZ AFRsFfP03uzaQPoJeZ9mKnXAw6wPlQV1lI2yU1OsifNfEcWoOHpfLkgle4O66uwQ IBuKI7W0oBzqgHkt8YCQ4UAUJMCVS5JCqKKXcOjsSdTuXzZkNlvskpXq54a/laOw DAVR37JxhWRyTBQgZ9eSL1zDP0W0oy6P+IGIwxdL1KCTyPSGt279yyChqh2kTfuA OkkVCU9xsj3tvEI/6+n6lV6rOL4YxKWvQEFt2ZFzrQSZ4mvVpFY0eElea5BlCHxC 7WjSL1W/6uiTAgMBAAGjggIQMIICDDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNpy lE3It+vF0yH+ELnstS/4Af8hMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMHAGCCsGAQUFBwEBBGQwYjAvBggrBgEFBQcwAYYjaHR0cDovL29jc3AuaW50 LXgxLmxldHNlbmNyeXB0Lm9yZy8wLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14MS5sZXRzZW5jcnlwdC5vcmcvMBoGA1UdEQQTMBGCD21haWwua3JvbW96by5t ZTCB/gYDVR0gBIH2MIHzMAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcC AjCBngyBm1RoaXMgQ2VydGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24g YnkgUmVseWluZyBQYXJ0aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0 aGUgQ2VydGlmaWNhdGUgUG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5 cHQub3JnL3JlcG9zaXRvcnkvMA0GCSqGSIb3DQEBCwUAA4IBAQA5aRoOZRd0Naov ySoYaSKB28eF3MC0HyXUY0He6NQ3HEI+Bxbji7PB12OtyZTNX9ZhRiYsA43uEXwO VH6wi5Vcv4iq1bbAdNyrCR8T/7UuwN3EHUZygzijvl3X2hHyf7RhSDPsnlravPJo LaU+hZVC/KY/s7QpGo+GYyTP96DF/rO978EUxKoJ/Z2YMegLpLEfx8KAkL56ocm5 J/YuUX5Ng+9mgZGsrUBShga0OvaMVtDgmE27KrnZuy0qt86kUsreTfg/f6/9BG0q iBkKFvlQSdGKegDFOPzqSG3JEI+BtQ7Q4RrHr9Lv6W3DpgpBZCNk3bIPqhumkCZW rlaNG9in -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAmdRde96ALlJp9jP16eo4 TCxWWUSLEylRa6dN0krlk2zP9aMG4PprJaQM2wN9LznHF7O0I+kBQeixn+ZnKDdt b90n2BKkkOKWcHWxGAOklMii4t4A88Uis51TOfDctWO0Pg5MOHfInsCklam+eukx zWVSujWia/42NtzIN1h/nYCDgWp6e5myQwAUHatYo9vgjmk+alh02wcWE8P5NHG4 YVO9CmrWxy3LRAXBKmPoJq2IkqXgxNuILIx07eravc7g+nYgpcUpHA1du9jmtJJV 4Z5y+F+qyKqbfzM4vgDzJrSy7OhcAlqIlvwVS4jUvEznBTHj3dj+8VLH+CMaE7w2 DKJIkNDX2X8c34IeAA4QwpgQN45CxwH2zv9Io6ECP3+XC/Jsv5q9merYjcPizjcs xj6SN5kzi9kAVGwV8/Te7NpA+gl5n2YqdcDDrA+VBXWUjbJTU6yJ818Rxag4el8u SCV7g7rq7BAgG4ojtbSgHOqAeS3xgJDhQBQkwJVLkkKoopdw6OxJ1O5fNmQ2W+yS lernhr+Vo7AMBVHfsnGFZHJMFCBn15IvXMM/RbSjLo/4gYjDF0vUoJPI9Ia3bv3L IKGqHaRN+4A6SRUJT3GyPe28Qj/r6fqVXqs4vhjEpa9AQW3ZkXOtBJnia9WkVjR4 SV5rkGUIfELtaNIvVb/q6JMCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 94589089674389143083040086894783157602394 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-20 17:45:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-19 17:45:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.kromozo.me' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 627569817061470362620517498966828644007041608927538682920958261787904707648789089683717083798042705676279972331262976929773126169840172906229375586501114783425476029093839097992444098821219661840989157543657354745779930722484494846330239027578436341528115093774121512318182204783988860330136951791764582767794091066783340872251595653433920887934650118161728639391694609026874575081827283716199947469034960639959065845103731024354877664301225163199749073682661544886584823741854697377528535982935474975905303529115004061868589644989185323947474484003130012515954781251052803659526503899674140189078279709400447716512367649061023060370553198052282116153590124043096078717821641353928210875914725415121711933489889115457099620828927616050974415294618877254091602148914981567133123376127375014017649622771528761644462206804014083597137151947898048890986125770068378422072860559113823701802879669844413000008059683453634075010701281990775070478525371046080412480168607554817378941313134960210996152303651337186939676369647896754379880106041114552260671748674197774643483840469529632509055029762435469805966557908837374489715885483444689488496472881456339259019415745865399240537104858548905375128628382160650182299942565953948372760717459 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) da72944dc8b7ebc5d321fe10b9ecb52ff801ff21 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x1.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kromozo.me' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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