www.neurokeo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:44:a9:2c:88:d8:d5:82:3e:84:d8:94:81:05:04:b3:ec was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.neurokeo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:44:a9:2c:88:d8:d5:82:3e:84:d8:94:81:05:04:b3:ec
Serial Number (int): 338672220991484397352279765415761572836332
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:fe:54:20:5e:a6:47:6c:c6:1b:d4:e9:f5:14:d5:01:46:4c:1d:28
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:1c:20:be:3e:fe:34:66:fd:ed:51:d6:5d:aa:2b:96:48:ed:5f:29
Fingerprint (sha256): b2:ad:1d:7f:f2:3e:64:5d:a7:23:33:8a:e0:3b:eb:18:45:32:eb:25:20:b7:d3:f2:ee:a5:4a:b9:a8:da:cb:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.neurokeo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.neurokeo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.neurokeo.com

Other certificates including the domain name neurokeo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.neurokeo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338672220991484397352279765415761572836332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-23 20:59:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-21 20:59:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.neurokeo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 633221436654571292306801251399976312146457072513750776408778879533853295331073643870745061982930763943104928767508216461560104236880365065315783190858904389422498788174786130259695961060391693321284833436458479281576117118682375327035633689207582339673060921963042483539056515444636561514652081702329845656307519622629286659536944645839081100324268499472777585022877698262542851865745560380472423326119783509442284310477506647673819169038705989403232052361140827785150195863410470031264988460253129318644109582107154606590016401541193273079638647864090176497458882628908559066409459617156766298245739652440370355368971941113064815021532843380314723214222366617057142300601515706177808027634876888656200332236714510732196893808494038614913735349829694074989237178642192239556560764087884219476930951045617241009545086344138448524323695154568511965533985279033108929093412754337899018063782222799730391517284348807138625330029365156209492854507632100497802220016057664137183043582781485905988756730994068059437938869107211305342333027318419090825987337978297828219674344811300170624552056589767869532962026361744154464583572710104036826784878770782899307717535056012526513042420902209943818757733205126061746014488786238789665627170407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52fe54205ea6476cc61bd4e9f514d501464c1d28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.neurokeo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016568cc63740000040300483046022100984de461c6cbbe24bc2de5896234c8800b05d84584b1283d43f93f6becc4a754022100f3902dd80e8c21751d1cb5196eb23e7c232bc28f99f1228d3d583c90ac5a7a1c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016568cc64200000040300483046022100e144ac76f25dc3bfbb19cb2fc1f9268fcd6a40157a62031dd8ae6ba996e7ff9f022100fa834088b85acc35b3f9830ec9146bd10ee9596da16c46b81b6c751f6b7641e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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