kaso.ai

Issued by R3

About this certificate

This digital certificate with serial number 04:5f:43:f4:d1:bc:fc:60:f9:f1:bb:8c:66:74:d3:da:9e:70 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kaso.ai

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5f:43:f4:d1:bc:fc:60:f9:f1:bb:8c:66:74:d3:da:9e:70
Serial Number (int): 380866298034677821652505012110112388193904
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a6:6b:32:f9:29:2a:39:35:6b:45:06:a2:15:77:9b:cf:b8:ca:ad:10
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8e:20:19:fc:c8:16:0f:92:39:8b:13:c9:41:0f:d7:a1:c7:ce:7b:5b
Fingerprint (sha256): f5:88:b9:a0:01:d2:80:ff:21:35:ef:e8:7b:7e:7a:03:d0:a0:5a:c2:8f:ab:f1:78:b9:dd:1f:5b:2c:02:68:8b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kaso.ai

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kaso.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaso.ai

Other certificates including the domain name kaso.ai

(limited to 100 certificates)

Certificate

The complete raw certificate details for kaso.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyj/9gU/ODwzm3t5sF6u
M9jEpr34FKc6LdWhIUkyfYs5d3NRJDcmF3XxzgIbk2A8L6lzoO7MruURTU40qamF
jrd6EI6dhsmn+ijJ50PPQQk3+0c/YC8xi7H1bWYF1ImI4tZ5kBQYxjZldmI3Rnrl
VLuCkvrPfIaOR8RkOjc63hlmqHXEbjzj/1fXFh48+3Or5XxsTC1ghcMZtT/Dl6Ju
Krq/EPaABA8JmI5mBltgs3t/iQVW/D/PkKyrCwC9BfYUBFgJIzU40Htq7wmqdYl5
hiwTEXncaPLTL2CI3N27s1BwhtTH66zMOMMdRVVWg0MrdfBpQgrBQa/JmGO0aBOQ
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 380866298034677821652505012110112388193904
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 18:11:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 18:11:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kaso.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23626780807093008618125167255493050915661451650474286958849838381833121689022728108423720758879623239771722693459060396361203388584511016493900383958246383926937912992312205889981300357452185672336318444982400526684942065382695194629861976567453608288532713999623821578887688721272214976228675711840811984843922489616501548056956552067617893675582341641208922685444460240964206946371102893393276879874254672418311177781345755372828991340812625895232319334509305206673837743321284966022094731293291765128583203269226094322904253069266910402592040277982249961115099830565550624263469942444591083950113487512003564245221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a66b32f9292a39356b4506a215779bcfb8caad10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaso.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bb0590e510000040300473045022100c81bc73a7832f6370b79bcd175c36b5e5d5bbc7034bb4e5d974d1e2001d2ab1c0220558725e4ab4f182071a9424d88bf4cfb3de32d757187ae13d79496294ace91c1007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb0590e60000004030046304402204ceacb36f38027ee628ef99495421006a9bdde175dbb864f643482188b10f1c9022061574134514f1f75e389f81703fc3f3358a054668a3ba06b84d34ab7bef94d03
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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