www.akyba.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d4:53:89:e2:77:ab:70:42:a8:bc:11:81:99:da:bc:4a:1c was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.akyba.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d4:53:89:e2:77:ab:70:42:a8:bc:11:81:99:da:bc:4a:1cSerial Number (int): 333587761444145240898578251407094567422492
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 28:7c:73:93:db:18:8a:46:8b:b4:89:4b:24:e9:0c:12:ae:a0:ec:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 74:14:d6:b7:38:10:4e:d4:ed:02:7e:aa:cb:6f:2b:a4:18:ca:18:1e
Fingerprint (sha256): fc:de:02:5c:64:87:6b:46:e5:8f:8a:fc:89:34:64:9b:8f:fe:7b:73:04:f0:40:e1:65:67:e7:7f:2e:36:06:80
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.akyba.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.akyba.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.akyba.com
Other certificates including the domain name akyba.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.akyba.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISA9RTieJ3q3BCqLwRgZnavEocMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTcxNDM2MjZaFw0x OTEwMTUxNDM2MjZaMBgxFjAUBgNVBAMTDXd3dy5ha3liYS5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCjAU5poXGzt9LiCzoScmafUcmk1YoI+At+ W1WAoJKue4uwEBBYufiO+6r4Y5xU8+ogxYgjtAIamcSn0yB397J0CSozMw9jacNf yqhclxl9GNS2wP1Sz86LnQLyzaGYLkb2CgejMAHOUGHcezqIvR8f1BQkanXDBqcf TdD9SXiikSsPRaEy0MH0qb5n/6qvDFQvUlY13WW1h9gFs8W39YkL+q6Safj2p3Yk jOuofoiczhzQ6JFxga3naQ171PteEJI5PXwOl/8bBksDWYUFbCy5tAVprcnt4Nn6 CzoiDUsVK05cPrdRbZju0Bu81xDFsL19amIvRhcwF/YtXfjizMAISw6MLwW7XL9i DII1KcSpAZE3l0a/CH3DnUJ/ahSuYh752Db8c8ITBzizAXuC2plHvhWUIVHWW5rT sLmEs5V58CRWHsVbrEjD9BELfKQ9LUCfomVRUdcyAcbwhiAFDlpXMikWaIyK6rAZ GVliVK3S4pmkc/HPz9DKE01P5nEIAcmV4druT1tzgkEegJRfd7KXCITCzPe8qD7A fPlWJ1D1EGQyPb/dkRiC9jFGvhie+ELLSAq08Yjfq9tJusDHd+k0anDFHTKOHR/C uE4ES2XACT7rvJJ/RqauS+P7x9FuaYAP9oK35/ntxBTmA0eE2npvGXjjePujKP2v CEb2PyLHswIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQofHOT 2xiKRou0iUsk6QwSrqDslzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5ha3liYS5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWwAk948AAAE AwBIMEYCIQDMJuj2+BqTwUclv7HwCM2z7aVu8gUXhg7tuTD9gSymoQIhAPtyv8/D KuVl0lN43ILggTI/1A6KmIM+B7SI5lcE+gfxAHUAY/Lbzeg7zCzPC3KEJ1drM6SN YXePvXWmOLHHaFRL2I0AAAFsAJPeWgAABAMARjBEAiAm6diFySrCCr1doTn3EYdB 0KccVQfHeUAoKVDoteeNAQIgXgbqpN9wJvVXO2UDklhVi6hW9JPkIZX/WcbwMZYO AEgwDQYJKoZIhvcNAQELBQADggEBADmS/+35ootVZsHJU9ce3+c0QLot7TMC1ITH jqLQ+z0151T/d4/Vf/T1hWpvKcqXUuQ01YwYVUY/k3GWBzY7+MzZbMTzrqydgqHx S2/jzLGtbZ1lTKaPR9dIc0zp98r6KKPup1/ozAV0vf/3RdMtq701+w8PFzBTJnNF byoNTO6evPcwDA9fSezOBTPboU2pjhssZ4MdZg6MPHXaV8TjRdWTNDLC3vYxGhpK IkBKREUHO0jW1abSVs90Nb6SSCz3ECT1f2rCy/fHqdlP/Yy1KCOKF7Img9SyqXHC LKkjPsH6o13bjE3V9vM8qnf1ukSUTIIQ4fxECN2aLeJ6SvBQndo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAowFOaaFxs7fS4gs6EnJm n1HJpNWKCPgLfltVgKCSrnuLsBAQWLn4jvuq+GOcVPPqIMWII7QCGpnEp9Mgd/ey dAkqMzMPY2nDX8qoXJcZfRjUtsD9Us/Oi50C8s2hmC5G9goHozABzlBh3Hs6iL0f H9QUJGp1wwanH03Q/Ul4opErD0WhMtDB9Km+Z/+qrwxUL1JWNd1ltYfYBbPFt/WJ C/qukmn49qd2JIzrqH6InM4c0OiRcYGt52kNe9T7XhCSOT18Dpf/GwZLA1mFBWws ubQFaa3J7eDZ+gs6Ig1LFStOXD63UW2Y7tAbvNcQxbC9fWpiL0YXMBf2LV344szA CEsOjC8Fu1y/YgyCNSnEqQGRN5dGvwh9w51Cf2oUrmIe+dg2/HPCEwc4swF7gtqZ R74VlCFR1lua07C5hLOVefAkVh7FW6xIw/QRC3ykPS1An6JlUVHXMgHG8IYgBQ5a VzIpFmiMiuqwGRlZYlSt0uKZpHPxz8/QyhNNT+ZxCAHJleHa7k9bc4JBHoCUX3ey lwiEwsz3vKg+wHz5VidQ9RBkMj2/3ZEYgvYxRr4YnvhCy0gKtPGI36vbSbrAx3fp NGpwxR0yjh0fwrhOBEtlwAk+67ySf0amrkvj+8fRbmmAD/aCt+f57cQU5gNHhNp6 bxl443j7oyj9rwhG9j8ix7MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 333587761444145240898578251407094567422492 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 14:36:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 14:36:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.akyba.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665002800416080111472507056462420633760149258188118284646629123328946775851081946275641456167999057370131414898146494742611810867589038844354802968618769365325072975491032738138781944372273029702807318243061357596795520962524604281567910352112107481849292561501998782430723112616319992226706368889007611921486389647935677304525273240907996784601271454954767501817517720104491168632206475844790174990482508496608995630896881744313090661510620497154593194543192471752464348692986267764710691091572444812779021568453183253974854363255466046458375714263664467276966156596417105220757725105352567542073028723092746002391911611974712790431401513087312618410501804676287199773844449910525896856050275069386670094018966135970156880363064562766260616785863122717257170445787952753359530239908245874672587422410711546008094387378784576296598406261222620537163022737957960179497460046410457371951595961948275168527687840532001414264901533271724413849176663406982523654157463079852051271831332263624472098224574945967415065293855118890749270365434617669673227881570484202038280747133805636863172543962724924639600513876407589734308214300635521052350470728898091124459044610660698992693495093057209081708041010501466650415964806178842452580026291 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 287c7393db188a468bb4894b24e90c12aea0ec97 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akyba.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c0093de3c0000040300483046022100cc26e8f6f81a93c14725bfb1f008cdb3eda56ef20517860eedb930fd812ca6a1022100fb72bfcfc32ae565d25378dc82e081323fd40e8a98833e07b488e65704fa07f100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0093de5a0000040300463044022026e9d885c92ac20abd5da139f7118741d0a71c5507c77940282950e8b5e78d0102205e06eaa4df7026f5573b65039258558ba856f493e42195ff59c6f031960e0048 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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