www.koreancommunity.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:bf:c3:e5:f3:86:6b:0e:a3:ae:58:f0:9f:42:25:1a:ab was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.koreancommunity.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:bf:c3:e5:f3:86:6b:0e:a3:ae:58:f0:9f:42:25:1a:ab
Serial Number (int): 286432370289557424138520268669014388316843
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 04:67:65:fa:84:e4:e1:a4:51:90:9b:21:53:bf:ec:cf:84:d3:b9:0e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:ee:4a:7d:b9:27:9f:94:08:f8:d3:42:93:7a:3b:38:2d:68:86:e1
Fingerprint (sha256): e0:01:98:74:85:dc:8b:eb:20:4b:f5:6d:2e:8b:0c:50:1a:66:69:e6:1e:b1:a0:4b:92:b6:56:85:19:39:94:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.koreancommunity.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.koreancommunity.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.koreancommunity.org

Other certificates including the domain name koreancommunity.org

(limited to 100 certificates)
www.koreancommunity.org
koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
koreancommunity.org
koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
koreancommunity.org
koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
koreancommunity.org
koreancommunity.org
koreancommunity.org
koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
koreancommunity.org
koreancommunity.org
www.koreancommunity.org
koreancommunity.org
www.koreancommunity.org
koreancommunity.org
koreancommunity.org
www.koreancommunity.org
www.koreancommunity.org
koreancommunity.org
www.koreancommunity.org
koreancommunity.org
www.koreancommunity.org
koreancommunity.org
koreancommunity.org
koreancommunity.org
koreancommunity.org

Certificate

The complete raw certificate details for www.koreancommunity.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJrMj3tr6EhR2PnIdyJA
O9lwDP9uUVfWIE/60GJaBf8INTCCwAvvjyUv/VfGTd53nGfhwyI+wFUIFP7TGTLh
amkoJAaXdZA2mIlug+YmF3cEVFHGjWYw5HgXvTMLk7bn77dQc0b126fXRQCi8RTp
i4rS4FfGyPIKnlROT4jx9y4CpP4THd5js1ESYpgBd+wfz0pMkAKd4qvaKcz57aBO
r5nIXxus99x80Tf8kgSz9cwqIdPn2v5cgGANmP1m7o+8h5O1bVXXwZyGRCQmUWfn
QKCnvL5MUjPfhbqbmF4uduOYV1T0Y8EPUraqAa7abQWXA6D3+7DgYtssLXPaZ3iw
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286432370289557424138520268669014388316843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-22 09:45:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 09:45:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.koreancommunity.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18254650178766968030415733676341917486027294055848187602436779898711763750460234558857670292645941895951347529864131905605118581491875698368839823257561603281192898941233425612362778711732025433344876044255431749820136305497785293742766158489337063260527104041301081616130567828308569166132164667996217722591233270021899614537596890676595875820048476964611922679034365710826058460519280405539469040416789879037399444804403985914302460375104015131605981479147608552744257329141674304858066647640359722223585260451928466074536417335062946260692676673021567073755478347524381649232843792675809580741621762639060295790669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							046765fa84e4e1a451909b2153bfeccf84d3b90e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.koreancommunity.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016600e2c3da00000403004630440220546dbc45ec41756862576392eb92007caf46bc45b31ac2aeaf9ce1f58d2fbaef0220511dfb54f206afde4c9b0e4b8741dc07da4a2235eb4039fe13b4552243d632ff007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016600e2c54c0000040300473045022100d3ced58208102b2b5c03258f24c5e3ffcef81534dc40f9f79f59d3f56ae305290220557d3b49e8c368e7a6adcab8296520c490f178b12582c81d00a05d0c1b5de3f9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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