kodachain.com

Issued by R3

About this certificate

This digital certificate with serial number 04:a6:76:04:16:63:5d:37:4c:99:c6:66:a4:46:b8:94:6e:64 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kodachain.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a6:76:04:16:63:5d:37:4c:99:c6:66:a4:46:b8:94:6e:64
Serial Number (int): 405092886762692274061547829679560345284196
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a8:34:31:12:59:50:68:fd:c5:81:3a:b3:a8:e8:9b:ba:fd:0a:55:3e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 36:c8:89:ca:4a:65:41:a8:9f:a3:d0:00:73:34:28:28:3f:d1:b2:be
Fingerprint (sha256): f8:2d:5c:aa:e8:f4:2e:d9:f7:1b:7b:e8:a6:17:f4:72:f6:c1:54:54:f2:38:f5:fa:87:87:e1:94:2b:66:3e:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate kodachain.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kodachain.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kodachain.com
www.kodachain.com

Other certificates including the domain name kodachain.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for kodachain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgISBKZ2BBZjXTdMmcZmpEa4lG5kMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMjkxNzAzNDVaFw0yNDA0MjgxNzAzNDRaMBgxFjAUBgNVBAMT
DWtvZGFjaGFpbi5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCo
fUzCaBAza059T1Ltpw1JoIFVllheqwskzPg2Syc5TsG9tKKA0aLN2fdTZclKefEF
2DH3MkPsU01tOX23UcuuktiX7+HBjP5wgqNELGOiHSi+yMtgr6fKP2SZWfOnb9bP
mtJpinYfoaXW8XnmhMAFmgk8/ZI3wB6kmRvdGuIGpAhnxa5I/nNbexFOk7IX3wZ9
jMVmhpTQtD+7JVbxTM+uG0GbBo6oWXJEeGP4CmVqXgIezZHJ3HmNcl3Mu84tzusC
Za9kl7EfMScowRM6gSpBkiKNapAZuFUUy05VkFOE8dOKlHbDVKgIDYeiX1Yc4aT8
8oJwujC/xUPWXAcXlc2IVOybD7SZN24QbflUX0sRz9Uy13K41fUFKzwjfkRcqZL7
IYT9wa0h0z0XirAeurSm+1zYJPsfKisbb6hyat5T75fOZqCwPQzvzoqTGv6Qo8DP
U3BQUWfm3K9FC7SA2sVLW7S4xlJzIWtmmQqVhFT0d9hY6Bh0ExEVUoaOFYYSXml0
q3PJ/mk761wyALy3xLuxrgWZYxx7Ae+AfScTfa713RO0vxTHwV52r0gijIXCrm3W
std5OseNMWV6R6SYh0n1lGVd4HRxVoYpy8vfLXNJKdfurTh+w8H18HF4rFFRoc8/
ajmEMEvRtJGE0KCAQCsmesOl30IKg8UmDL7lbgp6bQIDAQABo4ICIjCCAh4wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBSoNDESWVBo/cWBOrOo6Ju6/QpVPjAfBgNVHSME
GDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYB
BQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDov
L3IzLmkubGVuY3Iub3JnLzArBgNVHREEJDAigg1rb2RhY2hhaW4uY29tghF3d3cu
a29kYWNoYWluLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAAB
jVZkOiIAAAQDAEcwRQIgSzdlXwqaHsMGyW7fmZCd+aMLrbpPVnIKPSEg5tNm+mAC
IQCVJJkAgO8iTn7vWZgUtmXR4BojLxd+aSeNpdcyr6QGMQB2AEiw42vapkc0D+Vq
AvqdMOscUgHLVt0sgdm7v6s52IRzAAABjVZkPBsAAAQDAEcwRQIhAM0+lUCwl/Tu
yR/6bxUoEn8x+OQ5wmjSpZoNxISIjVPbAiARVQT6oOq5p7MFHGLTi9Vd/J35DjRT
ogjIfLYxCQSKujANBgkqhkiG9w0BAQsFAAOCAQEAlLjZBuh2uWl2s3e4x/ORbRFA
gWoGg6yaKSehAfiZdN+JyTUdhKvagIbagX9/yOYtSh6zCt1IysAVgb2OO/AGEeDU
hIYyjGbuCHzIJWaMlHoRyaqGY/X2ynzBec7eqIulBA/CCVXAErGMR5otsBBAtaUm
x7c3daoWIGe/+zskXTqaZ8lyXYUXm1lLjJmAmuj/6zn7iodHUE1gw8qoT+go5s49
/oTHgg78hEcHodmAS7/snZ+fZWxlB+ySGb7tFFaFJqMdVkeWjNGP1hFG/u6+B+LS
nUMu/nCPGDV2FBefslKyGkowppPhZc0lYlEVIGJcDaZoE/N8lCDPIcj8a940JA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 405092886762692274061547829679560345284196
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 17:03:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 17:03:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kodachain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687376995438017744932826430495559782943323644323194497979596467327986461561063879196016284603368843616353832296946332827133865720227872340051730316724280900177808365508619473627407894022875599425467512781232863203114156440981502672298863813877572520471626663089199783322122209413522816080042420280990311656758319102832960949050578088505536921684069672830841735693246549033703688159823063477684356213521806844928384253908260239323094141337592057384013490613757596865955023439556370023906382764882871956836741631713053183816572780592226233620891345490882250412978157962179350950693758297545704858944212226703004138969764137111499096631826974240062856450370102807475600949552867691364883995717302781669350412709655503935732126740975576209879051206166875981454871079798215948673494193594945047946134418104829328028924390797231968737882393029417433143410512363297140701454103291748997952467854150230187848224630781550155219415564154161490661017907467066781031983086164871805198959044260494325765914379883233885661507460893642282597144461408677310078314803104664733016328020619769158024692206816597966147146914870117569303926765341865062887742606498698645680744701486970857936762373456534169802041126587489509152716522690909915008144669293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8343112595068fdc5813ab3a8e89bbafd0a553e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kodachain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kodachain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d56643a22000004030047304502204b37655f0a9a1ec306c96edf99909df9a30badba4f56720a3d2120e6d366fa600221009524990080ef224e7eef599814b665d1e01a232f177e69278da5d732afa4063100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d56643c1b0000040300473045022100cd3e9540b097f4eec91ffa6f1528127f31f8e439c268d2a59a0dc484888d53db0220115504faa0eab9a7b3051c62d38bd55dfc9df90e3453a208c87cb63109048aba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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