DV SSL/TLS Certificate for *.ozweb.net

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the *.ozweb.net DV SSL/TLS Certificate

This certificate with serial number 06:b6:7d:78:e8:e0:f5:d4:10:f8:c6:69:ca:ac:c6:34:16:8c for *.ozweb.net was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.ozweb.net provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:b6:7d:78:e8:e0:f5:d4:10:f8:c6:69:ca:ac:c6:34:16:8c
Serial Number (int): 584771887668610635543715666367340854122124
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: bd:45:01:70:c7:01:6f:56:c6:e2:83:ab:f3:9c:e3:37:5e:82:c0:c1
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 13:35:6e:76:b2:de:5e:c3:9b:3e:aa:46:e3:9a:b3:9b:06:31:eb:0f
Fingerprint (SHA-256): 7b:66:1e:fc:5e:db:9c:11:a0:92:e5:e6:9d:20:21:a0:21:86:9f:3e:de:fa:57:1e:06:c6:46:71:81:61:2e:bf

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/13.crl

Check the revocation status for certificate *.ozweb.net
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.ozweb.net

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.ozweb.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxTboog+vSHDkT/MfSBx
N2uj/81i0YvyfWw3bc1DmXYuOb4blbxpZa0N0d9WaaJbkRvxYtNStF1xCAerbrea
feckudvDk5vbadlD+h9V6DCi9SmxLWL92W5ahbLkuAkBSAg2k+/M5xxkXJkh4EvE
xp7Z/ToOyk1NKpAhKnnUID26MKQ61XkOQV5SqQrwkZ/pLMd5/EkBAqGDn3AVlnxL
vqYIzsiIQLsoPv4nGqNStdjw4pS4HOjXsAQ61fPh5Bu4vr9zvl6iLNxSHoMj069z
68nn1ekw3Ly0KeLLGKrqSy05rg02dAdEEWay8JN+6HIinKUUMvNkzLOGAe7KynGi
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 584771887668610635543715666367340854122124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-10 15:44:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-08 15:44:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ozweb.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25636661346004070824822130156592123106385035115475316833478271410337335978878300397734399394647791694140059864999761815379833446797758330820793406532654847261909538994302244350095401316848825693488850283311480493683784098175762589340004840877916977548932548027067952309827924607545443582435524539244349205880525565730833801458261236069426499838371390467055552527248716216342409499406838050871401109830223812593198621835781549856559309411042036184212175993125544916623539441695145654895269181107722945982345016030768566262649753217120086364841144022352451756745233913145720338486807151153886508189785203891393874993767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd450170c7016f56c6e283abf39ce3375e82c0c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ozweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozweb.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/13.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe0000001975ab94219000004030047304502206351f7290b8868f15a4a623b10faafd2bc72e939f474df76c0acc9c5c6c2e3ff022100bbf316106e9dfde7fe1f7023996ef203eb6ba48f9b242127f95aa0ae00f75f2f007500ccfb0f6a85710965fe959b53cee9b27c22e9855c0d978db6a97e54c0fe4c0db0000001975ab942260000040300463044022016384149c17dbb208925bff47cd0caf57905174745fb5871dc5819a911e175f2022058c61e22e9e193fecc52f2ea380011318dfee3942a405116a4932c55b7d5eabd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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