kf2.icka.eu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:a1:cb:40:6c:99:ff:dd:4a:02:d0:92:cc:36:a3:16:39 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kf2.icka.eu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:a1:cb:40:6c:99:ff:dd:4a:02:d0:92:cc:36:a3:16:39
Serial Number (int): 286392531630771418511086527195293421868601
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ad:63:7b:01:e6:e1:07:54:a7:14:94:95:ea:4f:35:1e:48:9f:a7:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:7d:e6:23:70:7e:f5:32:a7:f6:48:5d:c6:d6:44:09:e9:dc:64:ea
Fingerprint (sha256): e2:9a:4e:e2:45:9c:ad:14:3f:60:9a:87:38:7f:80:b5:29:94:d0:39:97:06:1d:fe:46:40:e3:55:6d:6c:67:0a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kf2.icka.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kf2.icka.eu

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kf2.icka.eu

Other certificates including the domain name icka.eu

(limited to 100 certificates)

Certificate

The complete raw certificate details for kf2.icka.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnikq38MhkoyaBKvflRC0
YAwEg3KEU3tVGXVH3CGpGJqVDCfojW3Y/a3msdzwFdfa+AKgTDTqwxLXVWM/77t0
+CkmmZxaHhaIeJEQ3Wk+R2PUbMJsodGDCwyMjPOD0iJuMxp7bbAmJmfQPohCnEky
GZ5cGBgJoBkVzKTLAUhxsXOBWhCupckLNG1/5U3o/PmAskz2XvIoNwko0NYiq8g5
A3OfGEpq+qu9YRGgjX9u6SNk/lEJc2YyfAMpC9C5ZODaqmgifB5sAPS04mKMAp/0
on5Cr9CxBCjq0mwk7WXt6xkKDDGePyvoDjW7AMdi9J5M3CvCKiS9+ybEX7lo7C4X
71BUe+r8SNyzkVV8BmfOit8HAwc4C+SvV8lxYev9VOjDVPY+4QeTkopngJSbPl3R
jZBLlUzkE2w5hGgL/t3SzoF1qpn1oKoaSl7w642O6yx+d1cMP6ObAL6Uhvsu1gEQ
u22MmPkOmwF5MQz9TBm/1C+vBX0CUu3F7em8l1cC4ULzNmuI3uEg69bwAO7iOdvD
nkpmYGEn4zcCf7KaenksaL41O5gJp4cd1OwXuv+v0qT61kJB5Ww+guwqCJrP1qUv
ff3tXBuzPQVFqiAWfXgvgBH0ugk28v7dqZiAzOSOtWYfobp0Bvj+9b4jmCd6nRlZ
O3cMBVJm7gUzYKssg9K19Y0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286392531630771418511086527195293421868601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-09 01:00:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-10 01:00:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kf2.icka.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645239812171744319953652470276140965673614203075734674334416522242486803150624730116962305776486505244304032913398506293098929692322705845288225912727855487137064473183294550885382846111638467147603623326941536246999621613881873955280724720575161233147521834313653045266603902510331720580205025322286605515464983006710403152760843781080553418371814618500778461144179883330317378342159739168140826720471980174749698118892161133361045370049684090450474898461863550175393373096705993151484786566763446770331164150528340758327466879707382274074546263555423223794474593913941189025686761811534317246196698536620800235194198726351678885588113687907077657239279688194570065680674868121355651793350853583807843206141637941087936739454383645416781227719043428761229267018560384145271986459552773493748330486385132971580328002639572290003922409313621999878053274050548280107414229597095133577396498097618975618222225619299523580109009457425233278425549790328053674621160043021186436494929259412600010638361483913005577467851909025275889149800561025738503799115110985013563759725761951618232896789237097359813952374049509855910826042122246627342764946456894660187229664355092164934754408200481573510902840144087490857725841702618941708333086093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ad637b01e6e10754a7149495ea4f351e489fa7b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kf2.icka.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000168cffbffb50000040300483046022100cc3f7aa473204f305b13733fcdc9f98936674c3d06129259f3ce3ad39996dc00022100b692ef2c267567b87f60e6a5891be52888a17feaae10d1d0c3a740c0fcb8046e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168cffbffe70000040300473045022100a5edc9ee3ef534f8ded785c8f5011f6b2830764b391fbb846a35ea42c9ddd6e802201054f86c86496b19b7c3583f04dc1fdcfa1a4c265f7337aeeae9ccc2146581ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053045482498d2e2c392e4b98957f49b2b7dc778f4e6e2ed0e0f4e8b2db22f14102e66831a25ed6320733337d799705efafc00cc879829cadb4fa6d064749c5f49ffd4d60c565b8ce9788e1e8a5f61ccffa38bdf646a6e4b085d6023dc9218db7ce0dded89d856f0861ed05e839295fea0d59c80bff56c3e0b72c82598168e625c0a34a41f7faa9c791e850bb3649798fa25d34df3b87c8b811c97482a0ba21e19e43f7e24fea1e0bada522e825ecd9631824cbd0eaf0525207963716cc873f24162b99360a4a3291ad9f2017d40de4580d55fdfe58b2b1628857213969bdec502df08e1d55ff90c1d3007d82964be5261d46e148db7661b77296b112a439e73d