www.kokosema.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:40:e8:b3:2d:f8:8c:dc:af:ba:c8:bc:8e:af:c2:1e:33:98 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kokosema.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:40:e8:b3:2d:f8:8c:dc:af:ba:c8:bc:8e:af:c2:1e:33:98
Serial Number (int): 283424240526781190980964585401810857898904
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:03:04:18:cc:79:8d:d0:5d:68:d7:2a:27:27:e2:75:44:80:5a:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:f8:3a:3b:bd:07:23:28:cf:ce:ab:c0:c2:76:79:a0:3f:b1:df:7b
Fingerprint (sha256): b1:9f:a5:44:80:5b:fe:cf:d8:0e:5f:1e:44:19:24:13:6c:f4:e1:92:9c:90:cd:a1:f0:f7:df:0d:bf:2c:e3:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kokosema.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kokosema.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kokosema.net

Other certificates including the domain name kokosema.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kokosema.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283424240526781190980964585401810857898904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 15:51:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 15:51:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kokosema.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747141973639586491409070604144451169753223673745278437115281379718330352632816148469525998460072828124392374226667821874205769896572630570074882114379988183823208985972334968081062172355261405359733818958501053532651808410738611422929705452894475497492880314710390596932695184323789195835169030995900967937428423256324241607623603662210614161507423691579948552799952057910278568040141149607621039496108809930669314085025416925102014087614481103607572518928980682631301571454340439059528173576858624693409309063606502497830305643782256293721655887090052421394292474421378233626219640040686812534542080313481952651289014396188983588083707186518572516723692819500431836542622053241850240244016849356827197318788292317140608294721384456294382166292770766883861147979967300436089000055886578266373950586886060320007352366829878359055587913514505574821317633515767823284782960053557459495967442926207907775310977703493507305799582772974749009854459388265119792795320165519213256435665391498666135279435366762927649408500439925461592690865834642538346186133222255242608873320649670139629271815256911590780378332865969863386091055684615602033908562494976138678002906471069121668038901421468385568241036237492949519168789482162293419175672791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99030418cc798dd05d68d72a2727e27544805a8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kokosema.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3afc3edd00000403004630440220433df38e2b7659d0035ada912fdd9d5374e53bfc9481af4b5b2fec3c7f88784f022079b85389038e14c9dc3f0838bf8d1490e86d9dd708246829d0e64088d84d2289007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3afc40ec0000040300463044022025bb8388a62c222860022a3e9a7b2b85a66ac6e8f0c473ef0a9dd12609a930ee02201c0494a748bd8988569535ec5d8d88819957923b6b41065bb99882b862d2d3d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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