gas-oven.com

Issued by R3

About this certificate

This digital certificate with serial number 03:04:23:03:ac:ae:8a:e7:12:9d:c9:37:cb:3a:8c:6f:60:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gas-oven.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:04:23:03:ac:ae:8a:e7:12:9d:c9:37:cb:3a:8c:6f:60:35
Serial Number (int): 262744529322110681840461934827154785132597
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bb:a8:15:3c:2e:57:fc:99:b4:88:89:4f:5d:70:54:18:8b:b5:63:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ef:15:46:0c:11:68:61:76:f9:20:29:89:3b:c7:dc:81:76:28:90:e0
Fingerprint (sha256): 16:a2:a7:06:c8:45:4d:3d:21:2f:e6:3d:5c:82:a1:33:fe:3a:20:20:ae:da:5c:2c:f6:d3:31:e6:d7:ad:bc:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate gas-oven.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gas-oven.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gas-oven.com

Other certificates including the domain name gas-oven.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for gas-oven.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 262744529322110681840461934827154785132597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 00:39:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 00:39:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gas-oven.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 733880940179840027295476350362897414571433624347305216025681239421587284750749378494639233264471016685286290159921700430933275517257448672131533183642721025893925005942221848803137594155818331032633613814223990246086874275884203886402366549310085711972529493438887647018083874067381467547723568425238718893303284663349575202792889493889946506534510028935357683490539572793948018449715677139397788589476150626771665254354374007398357790755613572626114834119252375809388409142396968622448596362111895386289538734718243624560560033678066049404814031289778945584068449906458223517013267013889287470027057378385578419663643383813118742879325189211573205923387662487322095823369842634466820299378643070453675989442399183871197523669431039618175366831376997298288313362269277347808772627468161544767193722276333318366984545699634453372363628188693000064982248370102822603434740028092687981843023862197425887176915281610657222820682199580544526110763348717787578825391778016960856686435373102256341217975587757976908889795164554433857929868863091562338976498992904970851013006363013732469819206321559171937183821371447061535321199189703923482671822363711635546152986283224282198404479393281637048618745669768843478710035688734886443491431079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bba8153c2e57fc99b488894f5d7054188bb56311
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gas-oven.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018be53bbffa0000040300483046022100ca70cda5b7d338ba41da55411330e2fba694648509bd3b6853542df83c336fef022100d6370e36c9326ae9297c04f11e5edb848cf218fbef56659640895bd2625a29340077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018be53bbfe70000040300483046022100beff25d5a7fca009a084f8e3dd5494fcf63a5108a738e51ea889e4a74be30f15022100c93982ad3196a68e286403540c85ef2d2c090e590eab101e1715fcb24f7dff38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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