www.akyba.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:53:89:e2:77:ab:70:42:a8:bc:11:81:99:da:bc:4a:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.akyba.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:53:89:e2:77:ab:70:42:a8:bc:11:81:99:da:bc:4a:1c
Serial Number (int): 333587761444145240898578251407094567422492
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:7c:73:93:db:18:8a:46:8b:b4:89:4b:24:e9:0c:12:ae:a0:ec:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:14:d6:b7:38:10:4e:d4:ed:02:7e:aa:cb:6f:2b:a4:18:ca:18:1e
Fingerprint (sha256): fc:de:02:5c:64:87:6b:46:e5:8f:8a:fc:89:34:64:9b:8f:fe:7b:73:04:f0:40:e1:65:67:e7:7f:2e:36:06:80

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.akyba.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.akyba.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.akyba.com

Other certificates including the domain name akyba.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.akyba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333587761444145240898578251407094567422492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-17 14:36:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-15 14:36:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.akyba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 665002800416080111472507056462420633760149258188118284646629123328946775851081946275641456167999057370131414898146494742611810867589038844354802968618769365325072975491032738138781944372273029702807318243061357596795520962524604281567910352112107481849292561501998782430723112616319992226706368889007611921486389647935677304525273240907996784601271454954767501817517720104491168632206475844790174990482508496608995630896881744313090661510620497154593194543192471752464348692986267764710691091572444812779021568453183253974854363255466046458375714263664467276966156596417105220757725105352567542073028723092746002391911611974712790431401513087312618410501804676287199773844449910525896856050275069386670094018966135970156880363064562766260616785863122717257170445787952753359530239908245874672587422410711546008094387378784576296598406261222620537163022737957960179497460046410457371951595961948275168527687840532001414264901533271724413849176663406982523654157463079852051271831332263624472098224574945967415065293855118890749270365434617669673227881570484202038280747133805636863172543962724924639600513876407589734308214300635521052350470728898091124459044610660698992693495093057209081708041010501466650415964806178842452580026291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							287c7393db188a468bb4894b24e90c12aea0ec97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akyba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c0093de3c0000040300483046022100cc26e8f6f81a93c14725bfb1f008cdb3eda56ef20517860eedb930fd812ca6a1022100fb72bfcfc32ae565d25378dc82e081323fd40e8a98833e07b488e65704fa07f100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c0093de5a0000040300463044022026e9d885c92ac20abd5da139f7118741d0a71c5507c77940282950e8b5e78d0102205e06eaa4df7026f5573b65039258558ba856f493e42195ff59c6f031960e0048
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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