ikologik.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cc:22:90:4a:b7:39:d8:5d:c4:35:f4:9b:06:c9:d7:55:ff was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ikologik.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cc:22:90:4a:b7:39:d8:5d:c4:35:f4:9b:06:c9:d7:55:ff
Serial Number (int): 417912689536931715914551626986422353221119
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:37:89:ad:d6:41:a4:9c:aa:7d:39:b3:36:b5:47:56:a5:ad:f9:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:bb:da:48:1c:d4:d3:74:86:9a:df:cf:43:4c:df:72:92:ac:4f:bb
Fingerprint (sha256): de:fe:d9:10:c0:1f:e3:12:ab:95:63:24:5f:63:e8:7f:99:a6:eb:b7:be:4e:a1:bf:ba:8d:e9:b0:8c:0c:5c:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ikologik.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ikologik.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ikologik.net
www.ikologik.net

Other certificates including the domain name ikologik.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for ikologik.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgISBMwikEq3OdhdxDX0mwbJ11X/MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjAxOTQzNDNaFw0y
MDAzMTkxOTQzNDNaMBcxFTATBgNVBAMTDGlrb2xvZ2lrLm5ldDCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAOhbpKUMrCoyepq0zXl3uPZN3uG1qf2ekbYr
vJokZwt+LfXuvLFGD25MHeGtzijRlySWVVpCEweZsL01Se2+p+OenbBFJXd/HjDf
peWpWiDjhnms1jRrp+/n1wcJlBiho4Z0/s2V3JebXEOgYnWOxUl6xN3llTo6jjgm
WVh7Otn7MHQGjl1xgJbVlw2V32cNmiO4npMjEeTnZNySmsWqFaT2BCujY2nv426h
dEurQ8D6Z6XejRLidDPaVR3m0Dnw76fI+a7pdIcvSZNksfZtLZkWKv4iuQZ9OEx5
Y9Iwg8sv2YkSsL9Cb6VYGVflvBiG3St2TJkpnvNcpl+A9WVA/lJ/thZwEuxJsxkz
Lgm9VSSJFvyQRwUmVKoRnZTNlnt4ozJpepAcsm6LFMy3A1/rOO8UxlY90ZPInGwz
hGzmp0kWg6gstd5UZPElsUPylzawL+S156VuPm1HDY7GtXfwFeTaFZjvyX51cnI3
eSt4Iw6xeQhYDZFslT64TroJlgGPG+0UQMdrNXtG1zWg/j7fYLKKo3wuyUgk6VGO
C9ZzYn1piIpD3nMDAwldysADee9MEv+uw8JKxnv7lQ8AMAsx8wtrzeoPpF5Whzjv
LEFXd7vK40MtM/DPxD3oJmYqi0GhPYfamiOM6QvMvw6lc9r3SPlaNhfdL1/UESwO
pMh37F+hAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDg3ia3W
QaScqn05sza1R1alrfnAMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wKQYDVR0RBCIwIIIMaWtvbG9naWsubmV0ghB3d3cu
aWtvbG9naWsubmV0MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK
KwYBBAHWeQIEAgSB9ASB8QDvAHUA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKaw
qKqOsnMAAAFvJQ1DowAABAMARjBEAiAu8KapEgasN14xItPfxS3A9QX7SHy12Ttu
tiiaH3qIIgIgYPna8zzpwvlheOSdQBYvHylZ6CT+iLmapL2pKtVXpn4AdgAHt1wb
5X1o//Gwxh0jFce65ld8V5S3au68YToaadOiHAAAAW8lDUPMAAAEAwBHMEUCIQDs
zDSWumj58gm39VcZuVTnWCNFnryiJO0u3xcl9j7miAIgTM0dNBhXyS+XkYvEBNtE
qGigkPKN4MvDJzLJW+W5PBAwDQYJKoZIhvcNAQELBQADggEBAFf2muP4J4jiy/eM
RpjMbonOxas4xoUCvgusHPPsTjFggWIXf4ZRE+EpLsnQUGTk+pOZbNt/6xnPKoPL
s3sT923x1IOhwEXQpdF80mNDydmzETiS/GDhqsEVTGm1a9dJ59fbnUOaVVPkdXVB
8wtc81LdNtL94BvzSbr+RGQgitc/fcPZUGSC56Mwm08upW8eUUQ7iSjjEdloIHuu
N+7f8gP5VXs7QhG7wJuuGi4oozZlEp1lw6AQY3pBHasX4mpBzNzgxuuH9OVF6n2O
PLUa034T4qYbIupFZfTB0H07lDkBu3500wLMKljiUg7Hp+NfJjw9fpF4id/X5duN
4DDLF7Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417912689536931715914551626986422353221119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 19:43:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 19:43:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ikologik.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 947937858962595616150743122853118747330479998156322881124440695785198617535366322901618277444791691738070646024584757087104716621701780215780208416248871455394809837486979882386907669748336241388999691424055844414735204642291659946620090962917409764972519332977195774515267799557955910760986751982096817900953609717888670137740289153097432685268189094538644402731181456208656861801579888865935115074658707769858581179769168557065535910903299147771500955750722080531968687475624427573738938694508492477920934020123821729840409339371172978787104834923349698924214266629395965141412102071821118417064437194949299296414872006667745421572846313320564442737490103855171614737024139984463892236830899335374587057764268670381636560706739536970832417462880319044909377666482315292590231559641438902031467810435154234693642974803511262648539318485696231151505240424749387141966349106532954105580910581797170744791966254303740809717231165445530738615483811387880010465496177708214177761638782811852738747101448597567567186965733335004239402189495337335962757403711673392117169980715561432195615279017411449199687439604498748345017016205811674593860326052497034953019358788690700293650439766085628405849702535965541153180931060479715194484580257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							383789add641a49caa7d39b336b54756a5adf9c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikologik.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ikologik.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f250d43a3000004030046304402202ef0a6a91206ac375e3122d3dfc52dc0f505fb487cb5d93b6eb6289a1f7a8822022060f9daf33ce9c2f96178e49d40162f1f2959e824fe88b99aa4bda92ad557a67e00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f250d43cc0000040300473045022100eccc3496ba68f9f209b7f55719b954e75823459ebca224ed2edf1725f63ee68802204ccd1d341857c92f97918bc404db44a868a090f28de0cbc32732c95be5b93c10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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