tkyo.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:7b:c8:44:3e:04:8f:47:51:86:46:83:e6:09:65:35:82:26 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tkyo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:c8:44:3e:04:8f:47:51:86:46:83:e6:09:65:35:82:26
Serial Number (int): 390570074791530431786937074804698371162662
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:8a:ff:2f:7d:f1:8c:e2:6a:64:13:c3:71:24:8d:33:02:25:ac:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d0:2e:3a:26:2c:1b:9a:39:eb:6c:f5:09:3a:3b:69:ee:b9:db:0d:78
Fingerprint (sha256): fb:30:36:62:82:39:52:cd:c2:b0:f6:ed:79:1d:a6:48:de:46:80:99:12:3c:7f:42:70:a2:f5:3f:87:b9:ff:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate tkyo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tkyo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tkyo.com

Other certificates including the domain name tkyo.com

(limited to 100 certificates)
tkyo.com
tkyo.com
tkyo.com
www.tkyo.com
www.tkyo.com
www.tkyo.com
tkyo.com

Certificate

The complete raw certificate details for tkyo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 390570074791530431786937074804698371162662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 17:34:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-25 17:34:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tkyo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742120168881577500851810438026606939318827456398227022477320034543552421676897363234034156887048110810204776665889629322174573915047208820417690988160560882745274174287644031212664001505045528552830014863650511930294836552829465448761590339043813263846857921260192840217125764136542950355304384505604044407493304102119584028946736013971157712558830412630549005792106163457114969630108317773984454037127122018939884645638635795606339195009851207975568622913319801660349400138582492505075496497136934344550463558691123937460284342146455189189302072224159485637025772949537246505917887818462358701973275995075747197114315465523638489652803263100322824129587553542283109795562196414442481977692739913174138447296124825690284250293962650468049449437164454292650531500936202050475998855686133317154260691156643430416308238053313095578529768868967168817236889105373659694449702608615169035605302686247894576478494411371048456854552525662352359966427165734573790540153122471250507143723440408156785743873435216523862595294188219468886836681073534954716819582440292200657433837051523850073637064313979452399163244641355133709153922303859046748948398302677571317757815238719960166776616527636887790136637552314079822963939707340357471908459501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc8aff2f7df18ce26a6413c371248d330225ac3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tkyo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001711d46278f0000040300483046022100e4eeeb795d47c3b850f602b3c24fc0cac33c6b5704f716b47259cc36c525e116022100a8848d45064eace571310aec3fba0b7a51a4fb7e95eb2597a8e156c15f2c3a6f00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001711d4627b20000040300473045022071472f0c7d2e8d1e7d61a2b210efed1b77acad7015e2e9af147777782383de6d022100bf7baef627fa2f534873ebbab82de00bf3d9b9ddc758e40ec90b4c476fbb4e08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00726d405d226e330b78ea6f98564f3c66c7ed04c2c50a4b4891133c723106568606d824b179d2f12f09138e14b85378b371a1ee230dc9a234755adc88b8f7f2c5f380323efaaeb34630bb82b442055b50c88707adbbd7f7e30076d3c7b8399d136d95d1f8cda83d789d1a13a82ff03003d612fa59ab1f579156a3734cf3a6cba3f89a83ba717cc84d049f64f07b968c88aa7a068af3debcc505d2c5afc66bb7f495d410f5d6dc3b0c49eae57fc6609f74e56c35a01ed98e2b396ab7a8c78789ccaa9817650dc0624132b01247952884d52f39269e20aeec5edbef012a171be018ffbc62e167df2dcb9ba5ff73d188160b9597b44b9f8c6c597dc2358b1353d305