oyoon.com
Issued by R3
About this certificate
This digital certificate with serial number 03:88:71:0c:c1:1b:60:e9:d6:02:6e:a6:9f:db:30:df:db:96 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=oyoon.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:88:71:0c:c1:1b:60:e9:d6:02:6e:a6:9f:db:30:df:db:96Serial Number (int): 307765528684288576026407960012332130622358
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 41:66:87:c5:c9:97:e7:0a:4b:d6:b7:15:10:b4:f0:c0:af:16:21:a6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): f2:fa:34:1e:b4:13:63:57:e8:9f:91:5a:4e:4d:7e:fe:54:86:6b:15
Fingerprint (sha256): 04:11:34:67:fa:7e:da:90:4d:22:f4:aa:bb:c1:6f:5e:70:7f:74:96:65:db:a4:9b:16:6d:47:0f:ce:15:5a:e9
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate oyoon.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oyoon.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oyoon.com
Other certificates including the domain name oyoon.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for oyoon.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISA4hxDMEbYOnWAm6mn9sw39uWMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzEyMDYwMDIxMTdaFw0yNDAzMDUwMDIxMTZaMBQxEjAQBgNVBAMT CW95b29uLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBANO+ZSgk wACod+xQ6Vmw79L7oz/oJVfiNuZfhNItPaXCmlpGVYnPZqXAEvxxcNZRE4eiHKI1 PeBz67uBtg9gGMbJ0iimMpl/DcltQ/qd/NC2Ulco3qS825fSyPaoU61bDUAsu1JW zp0hgCv94fWXC2t5tqsmsQZt5uFWehLTNWNjwnavRSuIP/+UFSUqCqwewriRevlb WDLHR6qBP5R06z3oy+JepGUVkrXWZgZ4po39yfJEbMSriDtfyYTcBxeygJB3Bk7N d2n3fsM3vzb/k/H5NVwwu03qtWiy1uLu8U8H9DtVjA6Di/GVCMX2wlqku2wnfS0L dr8nrVgLy1v6eRIE+5YxK2KdFMKcFpKHG6ergu/7dVKS7ZzJhvNRlIjk7mwACCcu g331hdMZSzUNvJ58/Ln5aWLe9EyW13U4blemcrL8tu0ldbKysyesBMbFGo6KQdUV 0UX1m4SyWR7HTLqtLsG/Lofcpf/p74uRG78U/ZE3bKkvCMQB70QuD4SyG3bsHj6B V+9xLyB6aVSTJTwI+MLQXq9OFoY/6myhQeJdfGoJqxfNoFlDwMcGucZgbCo9WCO3 BhYKZrT0PmWuQnq1jwVMeO5oxnZW0xlTbuQVdRVe5EhTLLw5hD0z5CGKPjy2tcJX +pA3qMiKS3hTsk90FK1wSRYRSEr6eQEEH81zAgMBAAGjggINMIICCTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB /wQCMAAwHQYDVR0OBBYEFEFmh8XJl+cKS9a3FRC08MCvFiGmMB8GA1UdIwQYMBaA FBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcw AYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMu aS5sZW5jci5vcmcvMBQGA1UdEQQNMAuCCW95b29uLmNvbTATBgNVHSAEDDAKMAgG BmeBDAECATCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AKLiv9Ye3i8vB6DWTm03 p9xlQ7DGtS6i2reK+Jpt9RfYAAABjDy3CYsAAAQDAEgwRgIhAIdZUyuNUg1KzoAA PnQLX6EGFhnlauItuq7PGXhgJtkXAiEAjiCtRa6yXlYNLfys73bY/zvl9lbn8csc qMYgDMybvtAAdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYw8 twmGAAAEAwBIMEYCIQCMNMs2o46GlKUYXEsWxs6fMZfkOGRBGo+n1oc78yl95AIh AKI8ZByYRC/vPINhpQeuZegj4efpgfIVd5lBvS5mpL05MA0GCSqGSIb3DQEBCwUA A4IBAQAwZienbbckgx10lJXwWAv6k5ChAQrtz6Ubtxe2yF8x1FlvsIrEb0+U3M6U LuvVknzkXQ5OgJHOh/4QmeZq/Y6yJlqMiKyQzTwI6Ur0Ihk/CFMDZQijUnj+gjMB j4yTN0VO5q3qPAM8bmyYWKGbosqKwyMNHBaJqNiUqFcI9huEbrMZk2dCa3NX7h8P cEH/d31Z+WhW09D4BO68D0Hddz8qY1n0D6lim44XPTYBKSQ1XRtpt53s/DyFVtwl HDiIxWyiPns+FLrMrwnMVcQDyZthA8ED2j1oNAG9Pr9NoO/EacfeAQu18lmszd9w LBGklk4rDaU1a8F6QDceD05BPhBS -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA075lKCTAAKh37FDpWbDv 0vujP+glV+I25l+E0i09pcKaWkZVic9mpcAS/HFw1lETh6IcojU94HPru4G2D2AY xsnSKKYymX8NyW1D+p380LZSVyjepLzbl9LI9qhTrVsNQCy7UlbOnSGAK/3h9ZcL a3m2qyaxBm3m4VZ6EtM1Y2PCdq9FK4g//5QVJSoKrB7CuJF6+VtYMsdHqoE/lHTr PejL4l6kZRWStdZmBnimjf3J8kRsxKuIO1/JhNwHF7KAkHcGTs13afd+wze/Nv+T 8fk1XDC7Teq1aLLW4u7xTwf0O1WMDoOL8ZUIxfbCWqS7bCd9LQt2vyetWAvLW/p5 EgT7ljErYp0UwpwWkocbp6uC7/t1UpLtnMmG81GUiOTubAAIJy6DffWF0xlLNQ28 nnz8uflpYt70TJbXdThuV6Zysvy27SV1srKzJ6wExsUajopB1RXRRfWbhLJZHsdM uq0uwb8uh9yl/+nvi5EbvxT9kTdsqS8IxAHvRC4PhLIbduwePoFX73EvIHppVJMl PAj4wtBer04Whj/qbKFB4l18agmrF82gWUPAxwa5xmBsKj1YI7cGFgpmtPQ+Za5C erWPBUx47mjGdlbTGVNu5BV1FV7kSFMsvDmEPTPkIYo+PLa1wlf6kDeoyIpLeFOy T3QUrXBJFhFISvp5AQQfzXMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 307765528684288576026407960012332130622358 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:21:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 00:21:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oyoon.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 863839056238774174548761679525343576109340015173010386924660860151004487634368134858747741827890279116693952049497887292331410699232275860583486509911124530916370312566891095695667767211623410639486377774830869120202933479094997456517443994625580648222916718955368573229989871341008242454161511461578941120173296775015527128671721173033066381128297703627251652994690975812776156600285789552870820467946853420582329998317967832534226314533818159937942300749632138444080319091970327231673409592693296985682460021632692416868124364041216430177971522516002880532458693484639579985609891582380593562530275406753283854875813195271057738735095608073064699078463810897531132953098948214419200406326178753031534635605634050115542399089716461480861218319631200440319346742720593204996513522689467475485340227829889030873838944490987116134460651642845168896524209283183254172075690980190606834936634009300279752521359293387486121235474919176872406837051032481049372464530644897127780741952926859050727041137767613576102773273689913620194720613607009808877778277456312886756650187083025926633549980940200107354472135066031288147405084543383257714427598670431734579849812298334530590635628441855025643959177366140845300325052873814137849180573043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 416687c5c997e70a4bd6b71510b4f0c0af1621a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oyoon.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018c3cb7098b00000403004830460221008759532b8d520d4ace80003e740b5fa1061619e56ae22dbaaecf19786026d9170221008e20ad45aeb25e560d2dfcacef76d8ff3be5f656e7f1cb1ca8c6200ccc9bbed0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c3cb7098600000403004830460221008c34cb36a38e8694a5185c4b16c6ce9f3197e43864411a8fa7d6873bf3297de4022100a23c641c98442fef3c8361a507ae65e823e1e7e981f215779941bd2e66a4bd39 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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