k-x.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:7c:70:37:de:19:01:6b:0d:07:68:94:f7:1e:c0:e8:fc:69 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=k-x.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:7c:70:37:de:19:01:6b:0d:07:68:94:f7:1e:c0:e8:fc:69Serial Number (int): 303681034910008314377742335469314862808169
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 33:cb:67:6c:b2:5b:1c:74:a1:c2:42:c6:54:37:71:46:13:9b:74:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 15:28:e7:c9:16:eb:2b:53:14:56:18:b3:c0:d4:13:f6:1b:94:f5:8a
Fingerprint (sha256): ca:2e:63:8b:6e:ce:1d:fd:f9:f4:49:ba:17:c6:c0:76:59:3a:41:bd:b8:8d:02:40:18:2d:1c:2a:d4:1e:08:89
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate k-x.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for k-x.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
k-x.net
Other certificates including the domain name k-x.net
(limited to 100 certificates)
Certificate
The complete raw certificate details for k-x.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgISA3xwN94ZAWsNB2iU9x7A6PxpMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMTEwOTI1NTlaFw0y MDAzMTAwOTI1NTlaMBIxEDAOBgNVBAMTB2steC5uZXQwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDFVizPMIP/PebfJv3dgom0wFemDWjkYVuhb2PsPX3m CoEaC7LOgGHQUvq7scPWSXqzjglWujYcJZrZcf2NR/vOFpkDxSzww1eXo5XmK4bS 5BOq4TokWfNPdXBXNmBS4GOVvstIUj0k5EUQbDAE2CIWCVTZmstH6aeHmgOIs26n 8i73zKu80EqFYIQyuvtOjJqHhUQLaB/Ch3kXjcnPrmGVM6Z8sbIJurt5tAIuRnqn 9dxK5eIqlCx7Kd8H7cMXQrz1t0uEBasoqEfP4crzo8LLmDzrkObyidXbkDQUkPCt KrubOcpZxFSc0/EbI2ockkvyYHnGYNkyPEIRNsYumhbXjtqb27kEqKm7WyocavGa tJsUEHlF1xhIAycghRuvQ9JJuuaof7gS1DPNUx207Zu7tVUujaU+aE1Op1NDjHPE Jdzkl/HqY+15NvJhOWMdU/JtfD4NicFBSJ/UxMr8hconVc7Ti1ddUAEynSPIKaGU vYPRb+jnRWkgfiWgRee0Ceac5jmWw4D9onTBv8zVeY8YF5+gbN9D2H7VnXcLCP0m 33Xe9Ys06/FZ8p9zjUEUljRhlxd1epm3/hJwB4oHaYF5WtYqyay3JSmZf1pb3oMD slsxxwf4O7EO6+UuAayNJTGVD8pRi7vZOhOsOEq/ZDNkqefNC/RhPIaAJckVEHg8 MQIDAQABo4ICXDCCAlgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQzy2dsslscdKHC QsZUN3FGE5t00DAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMBIGA1UdEQQLMAmCB2steC5uZXQwTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgDwlaRZ8gDR gkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW70fnoTAAAEAwBHMEUCIQDI5OI5 JKHuM1Me83SK+IdMstSr4mDN0HHwvaeAyDfKiAIgU05EDmzVx/ahg7TtZclB/aFp SRKe0DpNSUSYXddjnacAdgAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOi HAAAAW70fnpRAAAEAwBHMEUCIQDsAQLBnkaya6Nx9h9qsAQFE+3glGhN6ylT0LcO LJrc7gIgAulHsS5uxZ8V7cX2f9h3lUeymB1QUKsSu/P0q66mMgMwDQYJKoZIhvcN AQELBQADggEBAARPKi6BHWsV7+PDTzZktCl7MFL2YM5Ayaxqo8wyLWw8cV0ucquh jSOmR9CgCEFJNxynIkBctn9z3atFyQo8uGmRty7rIqI9b4Cov3Jb1PdEC8+I+513 VcEyqE9b1LzUtcbi8lY5zUAtVCFPWLXPt/zKCgPOQuXknWoIsLR1qV4ChdeAYhGx aWnozppv51tu4Tg/qz2jA380DqSt/sZwncRX3zruzpvIobpPFktBjwupJY7SDRN1 0dyJfXnFWGsBs6XK16CJrQ/HhdPvqg+dfEfrVC9AHsgJUP7ml71D6EKeA/axFokM l16MGs+ncEtx0AeHaBQu2bXkiUfCrXQg1bs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxVYszzCD/z3m3yb93YKJ tMBXpg1o5GFboW9j7D195gqBGguyzoBh0FL6u7HD1kl6s44JVro2HCWa2XH9jUf7 zhaZA8Us8MNXl6OV5iuG0uQTquE6JFnzT3VwVzZgUuBjlb7LSFI9JORFEGwwBNgi FglU2ZrLR+mnh5oDiLNup/Iu98yrvNBKhWCEMrr7Toyah4VEC2gfwod5F43Jz65h lTOmfLGyCbq7ebQCLkZ6p/XcSuXiKpQseynfB+3DF0K89bdLhAWrKKhHz+HK86PC y5g865Dm8onV25A0FJDwrSq7mznKWcRUnNPxGyNqHJJL8mB5xmDZMjxCETbGLpoW 147am9u5BKipu1sqHGrxmrSbFBB5RdcYSAMnIIUbr0PSSbrmqH+4EtQzzVMdtO2b u7VVLo2lPmhNTqdTQ4xzxCXc5Jfx6mPteTbyYTljHVPybXw+DYnBQUif1MTK/IXK J1XO04tXXVABMp0jyCmhlL2D0W/o50VpIH4loEXntAnmnOY5lsOA/aJ0wb/M1XmP GBefoGzfQ9h+1Z13Cwj9Jt913vWLNOvxWfKfc41BFJY0YZcXdXqZt/4ScAeKB2mB eVrWKsmstyUpmX9aW96DA7JbMccH+DuxDuvlLgGsjSUxlQ/KUYu72ToTrDhKv2Qz ZKnnzQv0YTyGgCXJFRB4PDECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 303681034910008314377742335469314862808169 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 09:25:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 09:25:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k-x.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805063176229300606671475471394736238958483945087308818887059197316268322120940655594533530660215499867402004142941894827536598631542703287167047979943095391347292186250618223927972830326599716202150238508124151941041223255098111363960606062015023045919963780025173862207164040867310240135009933305274415690387979240398015567789385705136226448029157029133765624621993144473072374784413414467748715106569811338266560185066637060856858276607177623047118433258688073155333379665849211907644480056946219878308663246165745320897623783875326690740463739335159167965875341506752195199046529359507078293232935813031706833383752681943767313910541853784946296571015514661191112699913652146694121620819076183496628060332505642474372655197698529782773503854367053432016411767165323780341092260469019878065113664125639760824272610255020602994287396269192550762793909714601990116616283382264857330472602495565231562653187477481404420726810398727742137806340534400823685200400938362429825753969260148340727048757444064572243425563558966858492326119634733723536920278938803347720251748717579865682399725627180134216996911286104865884339049859515492726373731306155305605563721257717800402307815400946049552195492283734368652330025856017832438771760177 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 33cb676cb25b1c74a1c242c654377146139b74d0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-x.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef47e7a130000040300473045022100c8e4e23924a1ee33531ef3748af8874cb2d4abe260cdd071f0bda780c837ca880220534e440e6cd5c7f6a183b4ed65c941fda16949129ed03a4d4944985dd7639da700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef47e7a510000040300473045022100ec0102c19e46b26ba371f61f6ab0040513ede094684deb2953d0b70e2c9adcee022002e947b12e6ec59f15edc5f67fd8779547b2981d5050ab12bbf3f4abaea63203 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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