1oaksl.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:e3:01:b1:b9:95:fb:06:60:22:d2:d3:06:27:d4:73:28:5e was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=1oaksl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e3:01:b1:b9:95:fb:06:60:22:d2:d3:06:27:d4:73:28:5e
Serial Number (int): 425695493046762224708238840780485343520862
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a2:b7:f7:89:a4:1b:f4:15:55:39:90:0b:b0:12:03:e4:7f:46:17:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:a5:61:c1:fc:91:09:ba:70:30:69:20:8e:c5:66:38:8a:3a:79:5d
Fingerprint (sha256): 11:44:0b:29:31:42:34:a9:9a:04:13:48:0d:b4:2d:4b:b0:9e:bd:f7:18:57:f2:92:0a:ab:8e:2a:e6:16:45:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate 1oaksl.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 1oaksl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

1oaksl.aptabasiserve.com
1oaksl.com
7thavenuehomes.aptabasiserve.com
adventuredreamssrilanka.aptabasiserve.com
adventuredreamssrilanka.com
juniorgeorge.aptabasiserve.com
juniorgeorge.com
mail.1oaksl.com
mail.adventuredreamssrilanka.com
mail.susitk.com
mes.aptabasiserve.com
susitk.aptabasiserve.com
susitk.com
www.1oaksl.aptabasiserve.com
www.1oaksl.com
www.7thavenuehomes.aptabasiserve.com
www.7thavenuehomes.com
www.adventuredreamssrilanka.aptabasiserve.com
www.adventuredreamssrilanka.com
www.juniorgeorge.aptabasiserve.com
www.juniorgeorge.com
www.mes.aptabasiserve.com
www.susitk.aptabasiserve.com
www.susitk.com

Other certificates including the domain name 1oaksl.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for 1oaksl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumXENqtvzoPaN7lez6Kb
2djQ5Wzad4dcRaLPzAauPmGbp/qPIpLRdnQf2QE1Mf5WAvfzxjbRHQdXd7TMxCOb
6o+3ds/ddf0oRngNiRu+d/c9zvKfJhpKp1cOvzF3xZKun1I677DDzuwRH1xIR6Ht
mNeLkuCqlYtyRaV+Qcv06pkzKzTYGfUL4Bgnx0OkGRFn/rzI8i/KpnwGdoPhCxLW
UQSqcmiDHDyZC4ePFPqdLvbnjCdavS4r1gMcOhGeXZeeuKifqAkFt2tU62f0Y0xO
dUDHpYTbK6W2vHx5m4XjKUeVBmxWX4s3FyDqvIL8p2yVJkfY2NsxfhEw76xVzhBI
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425695493046762224708238840780485343520862
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-15 04:17:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 04:17:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1oaksl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23530507635057709973801870250215904508707215052961934597885809777152141510751618178449624893805605347179059913398782685108378046418667397888553452357018305250445434138352130902376686661553831512829267863190272612478880078767964092016635806095970396488349553436818018461295840413997997817753291228140194456529926299493551110037592955072877911441607698523697599745087876697694951939331680161429939500011341467211738904365469161196140736662955079575676071721886442561024217180493388027974747580562871525967802267726901833460986439234965011776907390095089479704560772759668983192762359182030461911176229014939385746966531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2b7f789a41bf4155539900bb01203e47f46179b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (646 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1oaksl.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1oaksl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7thavenuehomes.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventuredreamssrilanka.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adventuredreamssrilanka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorgeorge.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorgeorge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.1oaksl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.adventuredreamssrilanka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.susitk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susitk.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'susitk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1oaksl.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1oaksl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7thavenuehomes.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.7thavenuehomes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventuredreamssrilanka.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adventuredreamssrilanka.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorgeorge.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorgeorge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mes.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.susitk.aptabasiserve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.susitk.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016401e04f960000040300483046022100927a9fa858d2e9b9eb9e4ec74626374a4457b5ce14deca1d1099abb226e056a0022100fd9fa5a0d43eb8332a826a5fe52742290df5f30dad42f622df4950092e49102a007600a4501269055a15545e6211ab37bc103f62ae5576a45e4b1714453e1b22106a250000016401e04f6d0000040300473045022100cf2504d71ee20cfff72b53e855c5a1bbdefd2965c94ddbb67042f8237f053e3502207280ed05f9bce3d6a6e8a833dadc2885483d1cf77673bad7b1c26c8ced97de43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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