k-x.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7c:70:37:de:19:01:6b:0d:07:68:94:f7:1e:c0:e8:fc:69 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=k-x.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7c:70:37:de:19:01:6b:0d:07:68:94:f7:1e:c0:e8:fc:69
Serial Number (int): 303681034910008314377742335469314862808169
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 33:cb:67:6c:b2:5b:1c:74:a1:c2:42:c6:54:37:71:46:13:9b:74:d0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:28:e7:c9:16:eb:2b:53:14:56:18:b3:c0:d4:13:f6:1b:94:f5:8a
Fingerprint (sha256): ca:2e:63:8b:6e:ce:1d:fd:f9:f4:49:ba:17:c6:c0:76:59:3a:41:bd:b8:8d:02:40:18:2d:1c:2a:d4:1e:08:89

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate k-x.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for k-x.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

k-x.net

Other certificates including the domain name k-x.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for k-x.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303681034910008314377742335469314862808169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 09:25:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 09:25:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'k-x.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 805063176229300606671475471394736238958483945087308818887059197316268322120940655594533530660215499867402004142941894827536598631542703287167047979943095391347292186250618223927972830326599716202150238508124151941041223255098111363960606062015023045919963780025173862207164040867310240135009933305274415690387979240398015567789385705136226448029157029133765624621993144473072374784413414467748715106569811338266560185066637060856858276607177623047118433258688073155333379665849211907644480056946219878308663246165745320897623783875326690740463739335159167965875341506752195199046529359507078293232935813031706833383752681943767313910541853784946296571015514661191112699913652146694121620819076183496628060332505642474372655197698529782773503854367053432016411767165323780341092260469019878065113664125639760824272610255020602994287396269192550762793909714601990116616283382264857330472602495565231562653187477481404420726810398727742137806340534400823685200400938362429825753969260148340727048757444064572243425563558966858492326119634733723536920278938803347720251748717579865682399725627180134216996911286104865884339049859515492726373731306155305605563721257717800402307815400946049552195492283734368652330025856017832438771760177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33cb676cb25b1c74a1c242c654377146139b74d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k-x.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef47e7a130000040300473045022100c8e4e23924a1ee33531ef3748af8874cb2d4abe260cdd071f0bda780c837ca880220534e440e6cd5c7f6a183b4ed65c941fda16949129ed03a4d4944985dd7639da700760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef47e7a510000040300473045022100ec0102c19e46b26ba371f61f6ab0040513ede094684deb2953d0b70e2c9adcee022002e947b12e6ec59f15edc5f67fd8779547b2981d5050ab12bbf3f4abaea63203
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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