yukkurigames.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:db:0e:57:80:96:c7:2e:5b:86:93:6f:40:38:8e:ec:23:fb was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yukkurigames.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:db:0e:57:80:96:c7:2e:5b:86:93:6f:40:38:8e:ec:23:fb
Serial Number (int): 335877759680828241994888525260750261593083
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:e3:e1:83:44:e7:5a:aa:e7:18:0e:a6:cb:ff:a1:7f:07:6d:f6:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2a:a6:3c:be:8f:bd:d8:3d:df:20:04:68:58:75:a7:e7:3e:28:26:d8
Fingerprint (sha256): e5:72:61:c8:a3:11:58:55:65:f6:71:29:e8:0b:9c:28:20:71:b5:8f:8d:88:65:cb:6f:ec:a5:c9:c3:f8:64:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate yukkurigames.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yukkurigames.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

git.yukkurigames.com
www.yukkurigames.com
yukkurigames.com

Other certificates including the domain name yukkurigames.com

(limited to 100 certificates)
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
yukkurigames.com
www.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
www.yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
yukkurigames.com
yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com
git.yukkurigames.com

Certificate

The complete raw certificate details for yukkurigames.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335877759680828241994888525260750261593083
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-05 10:18:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-03 10:18:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yukkurigames.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 968769077485172056631503728280498840912528926835857935123295795016476618686969707769527989470638314398506960381625845394392938894498541320813729088732406480497237473410364682576666040633365452961342574153194854397645187645037557859424923460608446896134486502780505668828148659338250467509811725053934330574508004916996321349469231110670412161364630443991937323412633195907409203519465979190094132386442548838626426123434982757839906700274421940394425629648941129001275911118607058722660714195517195788833471983260984291105268021317424848059205843803757683997945695160867352695994060406419165315139464170639490674228202229794678728307396366597555649488470122235447643547492613722469006747469528627929180231972694747344778842211149008802658281288652079710142694350564701113146378450394529845813286806634740477650962068537926397137359280693046119389695497540517055653663791776836291481845717555305845671038420509915255243981369189307005140224893462877783531458343534518559599677980665047055796471359675735050086456931580024781276025168782995784976846735702502011228254142912101560459575631427767048944419997489115549898248645174142251903653389364177910572746265971287190105391458415807909133190238537837627905179881325928801586228827103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dae3e18344e75aaae7180ea6cbffa17f076df6e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'git.yukkurigames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.yukkurigames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yukkurigames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ba72779c21f64be3b9237d810de01d89dd3f2dfd41002458c3c51f0844caaa983462d8bf7a3ee3fdf4339269cfac5c11d7ae4ef2c7a8d81b32f48688f9a8538ceedfbadc6668dd5b9ae2f0d148e710072631fab4718063e5d314a8601b76648f6a27ab4c2a116f5131d10d626f96b49c886c09da63ef2236c2df9afe4b185afc2ceb2ed08d82350753a6475669b54e23084cc5082d53494819c4be0352bc8978fe1a7c79a53ef267874ce4d29a0997c87312900208de02e837340563f2c7283464559fb66be732ae15ced284915bda496081087c27f9fac30e419fa71ffb760fc252862c04858ff2295dc5f967fa51a6e9c3e01f64b9ffa21d2a03a4eca7438