klokka.com

Issued by R3

About this certificate

This digital certificate with serial number 03:54:be:37:1e:84:6e:ff:2a:62:51:6b:7d:b8:49:99:6d:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=klokka.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:54:be:37:1e:84:6e:ff:2a:62:51:6b:7d:b8:49:99:6d:10
Serial Number (int): 290173416131130681690916853140301182233872
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 20:b6:09:56:54:a9:c1:70:02:57:d3:61:bb:d6:67:f0:c6:13:05:ce
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8d:35:00:a4:36:38:8a:9f:a1:d4:00:a0:fd:1e:b9:ce:2b:71:20:f2
Fingerprint (sha256): fa:60:89:65:20:35:d9:a9:f5:9e:c1:83:31:08:94:60:2d:40:52:d0:49:da:26:f9:18:bd:94:1b:99:fc:5e:37

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate klokka.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for klokka.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

klokka.com

Other certificates including the domain name klokka.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for klokka.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZj3stzDWUr0T5f0bDes
eHJDCkdpTfe3zJXYC1gGEtUwYa6eGYyzumP14Vl5cGGOVWle9DR3rxy3RIO8WCPS
Ja9D1AoBQmVFFhP55I8uShVHmuBPiIAs93czTi5o0N7QO4knHejEqF5SiB2KnF0g
gbR6hOqMcRRa+BLvlf5tAQysRED4ZRFEidf3ATU/m5g0xblYRf57I0v/ymbRW18A
Or/oxJek4Rknvp2tUHu+dLSFo1//nmI562nqr3XDUe9r/Xz2m2SFl43sNDNsi5Ex
VuvlYzb6+nj+3JiSItU37WsvOLNjfRD8cCM13nNGW2BGvIzpE3WYBdpTiJGPgnYu
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290173416131130681690916853140301182233872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-25 05:52:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 05:52:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'klokka.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22419611100581743794184233414906026882479071561044236769267777948663321872790101782119415414304506728666494776167301454058337037705668154699967500385277219317294048040111202839064256032876303168287661452686873895918033078181155083846917721817817992802814568402716764842552997717330312024549360770345284944242344498560790506266861106081973380814241521579900520547892090825987559491713849477835901061843905035016295154877011127373411584088764635791146056490715360185383239633671367488422810774447315733702905821529184276769042454826009490216654986868735837619630530393295421988013337053220619788929441231712582477688411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20b6095654a9c1700257d361bbd667f0c61305ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klokka.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001898bd27b030000040300463044022100f780bc8ad64af23b542d0d52b481716c68b6992136bf46d3a0929d428923215e021f79cf6abd66116802b8430a4d00b89f161be075b0f89dbd1e3ec9ad6e97d65b0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001898bd27b10000004030046304402205f3e2dfe09a90dee7ba2a6d35901170a4a8bee854f07ff758618461787380553022075d0662d06b271bdf72149eb8ebae787ccf40a1c23c64cba4df0daa569da0902
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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