www.kioskmagazine.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:7d:5f:75:b7:e2:32:0b:ae:89:42:b9:8c:f2:85:16:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.kioskmagazine.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:7d:5f:75:b7:e2:32:0b:ae:89:42:b9:8c:f2:85:16:6c
Serial Number (int): 267288307188222050592518826664200077907564
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 92:18:f2:af:32:7c:0d:e5:91:6f:06:b5:66:d9:32:67:50:a1:ee:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): eb:a9:e3:1e:dc:c0:76:e7:1e:5f:d0:90:7d:a8:34:80:bb:91:85:f2
Fingerprint (sha256): db:08:a5:0a:bc:36:26:8c:eb:40:b3:bf:a5:d5:37:c8:1e:ec:51:e7:36:24:eb:80:4c:97:c4:85:3e:10:b7:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.kioskmagazine.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.kioskmagazine.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.kioskmagazine.com

Other certificates including the domain name kioskmagazine.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.kioskmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAup0fxnLSrx4P0qDrozi1
R99YaiFrw8UQHSU0hCRcxi6ipjFyBWgvDxxKm0VAIbb1QvmqBZ3jOPtThlpp1q6S
ZklNUFntLFhZDpgIzI1WX9crnfZq0wPHmNGaV2f2Dd3y1Oyi9SApkF03yy1oxl8m
qs2LkSmqekeIxzV0p/5MSE7Ko4xE0KCYLuNqm7KUTF76IciBr7zsKIK9oupn4LIn
IA55ANanNKy9uNOTXxNS8dbyqCfRAodwzWetw8kXYVj2ELB+qSZvMq01XSti+Cje
y/OI46G5Jeengmz9Jb6ekDFcZ1GMQ4JXQk2wfbki6XyMGkm9TcnCV0yJvcKs/xZ/
OnpZ6tipCpZcDLaWcrCTziXbNKGKp8t28NSl0jLCUWM4K3rekL1u45BRRFoeo5jX
g3pYFc5ZvOf5gmiCg14NIRRCCdVUhV/YKRsVJiSIdZgs1DyP7L0R1VTT/xka+JU8
gzlP0Wv/kZCZaAhjPc4WDkNiw/8+5zsgeyOoxN440lry4TFfyU8zcncjU7/snbmd
ueTMiSgALqOhoP7sBX/1Sl9A7m2YU03IyqVgYLpLJqCWtynsb9C3B4LYBqzdaClr
89ML4LS8zjyJsWmAz2l4hrrd4koWeC7VwAzXFWHrvNMjsFYkfWD5/fLeUDwmcj2r
xdToCcGYP4nHbLn9QoZVfbcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267288307188222050592518826664200077907564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 07:13:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 07:13:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.kioskmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761317743884492983282237733662001311896612817230664730475254465982861759071452502802597275722311547321246190636269108602452924342755900044650710961308165687581617956492445261278971388302107046088668668185754613076882323720414632665411794724511015777573137361389246007350728481301347891511224379635044812814662003683660811490203799756258227034625153903206677166009671510967564804617041482152000004063930084848190894852936937793287244911828741138877411592662446026331307373735531318281018958035251232291557809846251917356691327501825898235511118613211449283556491150641848082879597299481136244505188496364204060715088103734439467827231044616581549796384214770635254780594037822946922566861325913522437353240812266375123165813414721747376418579775736477888763947565040757475120699382599309130207978897457824153281730416377315786398467526961112214840074994750408698399444555584577385854700682443772293293686534983249070975447934947011090423443110011313747436804590248575694953008250092362376505801150578664076022973954486037408272601217466265057896844972443738480017978205808050114742990375088325180407358847748366582881538166772740424824277087534426774349663905817860137620162757861670469322290639084183418106427419025116427173299060151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9218f2af327c0de5916f06b566d9326750a1ee26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kioskmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b92d884890000040300483046022100e9363fb84808068f2b04e29b969ae11cf07143565ddde990c0c9e9b533bbe8a3022100dd0464965253670ef7fd1db0d6f52bbe956ab05d14f0789c9cae0a05c6a1aa86007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b92d884a70000040300473045022100ce7ac7ccb7482724cacf394f4bb7aa53aa6aa4055768e2b4ba022e4c4d1b4c4b02203c76ccd24593ef2a72757642dd10d707c05a3eadaf3172a9afcf9f966400b4c4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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