jokko.app

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:55:c6:08:5d:59:39:dd:83:c9:db:54:1b:70:f2:9a:1c:d9 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jokko.app

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:55:c6:08:5d:59:39:dd:83:c9:db:54:1b:70:f2:9a:1c:d9
Serial Number (int): 377636375490194345646232857760525205511385
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 44:69:b7:5d:ba:57:72:fb:6c:5c:c7:86:8a:9f:2b:d2:fc:ce:b3:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f2:a4:cf:3b:42:c5:a2:2b:cb:98:b2:6b:c8:f2:ef:d4:f7:ca:2b:3e
Fingerprint (sha256): eb:e5:46:9e:be:48:e4:97:52:9a:6d:9d:ef:bf:ac:a4:b0:42:73:32:f6:83:c2:42:11:1c:ee:55:44:bf:2b:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate jokko.app

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jokko.app

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jokko.app
webmail.jokko.app
www.jokko.app

Other certificates including the domain name jokko.app

(limited to 100 certificates)

Certificate

The complete raw certificate details for jokko.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 377636375490194345646232857760525205511385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 06:21:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 06:21:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jokko.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 662362773256240947836985704800833114148298467931021260035000082652090021647060190057341261373819629906136935393739895607797488841626404357204228733684542550769978982259398946702683982267363768062852068232693436079368871638320138334309734275042622795501321603415446822112358506534736836523611452201438018947021878233551387478156787288508344704768606210865461224678696501650393177602495376451451342976435250717963639152242284553122895943040224417163985645707311438370892350322822128714197309853023328922423142546754995303980857628838116136336919735363069632837732385887584362196086526208036321534617860151125846769257133832428145414126899067090928431143115493025377882727457235043869923856352481153157086801933180902892151813197488728491296076921396674456182586620195954064356862371679038203016485294078264183407940793199612706328017693827380451736983904425164868534752763971811233684027708794741529433900606257062568569566523656039370445828911601239089262108934776374283571748207034352246861817912095321873357756498810823900472681853637676571239049484765121328817087169374968960913430881992049838730219264517699808396220037398809188697583868951580503990323075170576358131569942474285910274632361388470336690882226543014028721239395409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4469b75dba5772fb6c5cc7868a9f2bd2fcceb370
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jokko.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.jokko.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jokko.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016cade6f66e0000040300463044022066049ecc430bfa8c793d3ec0b7c82a1ffd8d12ff7a761e84e22756ceaad8c23d022041ca338e055d5f415314bbf2f348718bb202a35f1f137131cc1e7774146f158100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cade6f65f000004030047304502210086484777e038eeb268ddba12e90ca45cb6e02f92eb7076787a0533fc8d4603e502206314944fc19e2bb890967effc23a58d9383689463b32a82ce6df8ef7e40ad18f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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