jokko.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:77:a6:55:1a:af:1c:4b:db:03:5d:00:d8:09:bf:fd:9c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jokko.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:77:a6:55:1a:af:1c:4b:db:03:5d:00:d8:09:bf:fd:9c
Serial Number (int): 283614253424037604455875046021067769380252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:45:99:77:bb:08:0c:50:03:21:a2:68:1b:71:cd:2a:5c:96:35:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:d6:2f:d3:24:80:3a:54:76:55:84:75:2b:ee:92:ce:f2:b8:a3:2b
Fingerprint (sha256): bd:87:0f:39:93:f4:06:35:3b:16:8d:d8:e7:63:97:56:c4:a3:25:68:da:33:ab:28:98:b3:ea:98:ac:54:36:97

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jokko.app

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jokko.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jokko.app
www.jokko.app

Other certificates including the domain name jokko.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for jokko.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283614253424037604455875046021067769380252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 14:29:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 14:29:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jokko.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 950219931332424668940068869190981299132581219184471039314718766059205140484640706406387134039935392335958416942880091490227825508801994318707724138149430929992290993975139800117681307308042028203409413902724380848077138201013010786004623723091539299230296424677415224218907254319476785560187480844931612776318388652415336821293672921019014173570047845611736629968156596010853937294227316139200733997862703738695326009521114817543588354005569665544041137415310041664110923465015415003841223546686977580295442981857443679893094444509164323489130259723320265848605853121399920608245406630652019738129329644724017422067043376761840729186781705070135083046837277235191760941234482929463268818981611111242500385997016142707535635448955864727190411081866684582232350206568101072991286901581002156091505169525710798228858896951301511433789634717279239646993589107972227783012473156044420332339940512082878322686001335447240091253360927266794684503861805664734631186882591260668611017359747479750106441187595721319334673692121665412730783432243469237458560805172640755200290068391328474175625415823960555495182423964841387373630828403145768836440373352997785573642103636655807922985544785946203632168091176481321863366236050206349541971364201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44459977bb080c500321a2681b71cd2a5c9635e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokko.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jokko.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ead7b47b600000403004830460221009069e866d2d8f320e6f8786f1a0604053e112a007444fb28fa639ffd76b1254202210096d75505960b874a73cc8d4a9fc1870d045b81a82cd336561d778a6a7a1828110076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ead7b48920000040300473045022100dd0b683d74245691b2ba51175b8daa844ddec87a05e21431b242e03d6190232d02206094b128f86b2e668d9df0ef94e371f615df723913ef0ea022c5df1bc977b006
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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