jokko.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:56:10:00:56:66:49:06:38:a9:b3:a9:b3:dd:87:a8:66:c8 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jokko.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:56:10:00:56:66:49:06:38:a9:b3:a9:b3:dd:87:a8:66:c8
Serial Number (int): 377734696682565351515665738799549195511496
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:a9:20:a4:9c:38:a0:d1:d7:30:e2:a0:2f:7d:fe:5d:7b:41:c4:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:3c:0f:43:4f:be:b9:8c:35:3e:81:d1:2c:19:7d:c8:59:62:34:81
Fingerprint (sha256): d9:62:3f:34:81:e4:07:ee:c0:b1:54:c5:0f:95:60:25:cd:c0:cd:c9:37:bf:43:ac:0a:8a:0e:1c:49:d4:79:16

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jokko.app

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jokko.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jokko.app
webmail.jokko.app
www.jokko.app

Other certificates including the domain name jokko.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for jokko.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377734696682565351515665738799549195511496
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 06:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-21 06:21:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jokko.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852599700112186579840506814453388298828906929816541820775727762625975294659402238749313300714076769126785951740459215776817151624172751339404579799136699399286786832672755332984067278690324599685952772083182619830451224810183937785778245244261723266270965538007117380904020392185821157404126498204141277054931586445412913908000673487903938836262915271381271464649709352417443217371599457739143464163676329505592560239602376749957808145623453821231120845951172944956588995103637534214785705013143551558136725726492511931825885977097838644276267131391784251678773502893286154246679599111278627010698942631807462202163121095357152973201709354031289732694062083361510121478004401255102616255646921548942007013425798383229730633118813540392565418957719674226352312507738030388923180220196778248701277099832458913838708233161093591586145465383067644094589375930757354475473681413916920919756323699517361860219687047445356599758299229812943034388513524482633888156492346298701081380576399952555224862112258583456365024035585341916745365368392489767202052259555919941491909326413846657351156620710576328893910035616146204169625948806096157520965334931862957490618653778493503083731768411952650606413731938791334412199832664022100426096822147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6da920a49c38a0d1d730e2a02f7dfe5d7b41c4ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokko.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.jokko.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jokko.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016a43ebaf41000004030046304402202d261fbf421e0e0b0f79848b229f4fda1cd7c87f097388bc7e36cda96d3cfeea0220153643b2c4743ef89f54d4f3d92dfdbe4fba7307646b1978901899e811e471e900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016a43ebad800000040300483046022100fec19c2c75a1b0cb2d9f2411ee1bd32f4cdacc588e92c41e2b297aef7df7304f022100fa4ad81d57543c36566a3c85bcf28477469040a14956e80c2beb2a55565ad2d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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