lists.odem.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:98:cd:c6:20:72:a9:46:d6:19:14:4c:21:c2:e3:c4:73:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lists.odem.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:98:cd:c6:20:72:a9:46:d6:19:14:4c:21:c2:e3:c4:73:e3
Serial Number (int): 313333298039298790482116195232536911442915
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fc:3a:5c:08:d3:4e:4a:87:af:26:21:31:3f:f4:48:9e:f4:35:24:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:d4:a1:85:e9:ce:7d:6a:e9:89:c3:bb:a5:39:fb:3c:c8:3f:86:41
Fingerprint (sha256): 04:c4:02:44:9b:0e:5c:af:6a:bd:b1:0c:fc:87:42:12:f8:83:82:4a:5e:70:78:aa:fa:5c:63:e4:e7:0a:3f:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate lists.odem.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lists.odem.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lists.odem.org

Other certificates including the domain name odem.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for lists.odem.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313333298039298790482116195232536911442915
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-13 14:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-14 14:35:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lists.odem.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783360330740215072439446460186255164555956046709627398453333877114183541818365408157932415208809694036087477819032752941257394522460070895004406962330214774425931798848119364675934586096091445943822058470334369186112622931987183720376549756509309562252206717199261414534646071058021993652129944439636809518252038626142751010700049577580619686754487052088387113939673530709319600535166356388341422748474017945154874923974209465613458550485186813870496986185767669342531833083289171140552775190789815769438397191161481389991225036284650204139558107117963222127132148735346863939448035495021877762317126236023138246676382560499571473789054274100562137362186309328097926163161327018914184794263287174416409144298710441669432267708907982588156991159062957283258457916095925323219664015704172953321756112849393931265052811361703003530213201468349627076973974183335293778796245910376781631196455544643252033955808484659951036502593215551867288323809070984723000638073056962066977748955514106169272932303818885442285714172450639979126078610628928809373304088011777986153247818072630957858126098885906300478451948300828764195738158906127799916784624083243534107875074502406622222057150208215262081626668856369879923740275185338183678097779941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc3a5c08d34e4a87af2621313ff4489ef4352476
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lists.odem.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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