www.otmanager.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9c:14:f1:a5:74:02:9c:4d:27:82:be:98:3a:0c:ed:36:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.otmanager.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9c:14:f1:a5:74:02:9c:4d:27:82:be:98:3a:0c:ed:36:4c
Serial Number (int): 314448746294194604832053538276893992498764
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:5e:b8:e5:ba:cf:49:ee:42:6c:c8:8e:e5:22:13:2e:5e:f3:be:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:1e:ed:61:a3:71:9a:05:cc:58:6c:44:8f:7e:27:78:7d:55:24:eb
Fingerprint (sha256): 20:a8:ce:0e:5d:c3:1e:b3:c7:72:7d:6f:3b:00:10:10:57:53:c6:b6:9d:88:a5:c0:59:e0:6e:26:f6:46:13:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.otmanager.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.otmanager.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.otmanager.com

Other certificates including the domain name otmanager.com

(limited to 100 certificates)
www.otmanager.com
www.otmanager.com
www.otmanager.com
media-0.com
internationalmobile.com
www.otmanager.com
otmanager.com
www.ventanasdetejado.com
www.visiteimmo.com
otmanager.com
otmanager.com

Certificate

The complete raw certificate details for www.otmanager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA5wU8aV0ApxNJ4K+mDoM7TZMMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjgyMjIxMjRaFw0x
OTEyMjcyMjIxMjRaMBwxGjAYBgNVBAMTEXd3dy5vdG1hbmFnZXIuY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs33q824S6/2Hqqh/kYs4tI1fEAwe
R6iNFWb2hQSysTAlWB+m1IpYU285dAasY7lEzC5eIF9tjGcmLMErZmSAY5Fogc5r
G0tArR4h0Yo7YL6ocJG8rv5WEKyu0z9NRFntb0SG/zY4odLkGwh7V5ZoA8sH4vcq
AQ4DFfKC+Dw4n2jNztsU2EVoojC8LAfibg0p3wpDV0C31b8LbsnHQur2vDeJn/HK
ofghZCY8uXLVCzNEOsMLfrfgfK16A5z4o5aU268lmy+8zImSQ+WJ8lKighkDQNgm
wrcbIIGlCLHc/G7pP0SqKUPSoaXZEycfj0HRnMR2+d/eBRwQmO8Z1DpuRs54IXFs
H+2B9FeiXyk5hKX/wzRWC+sAhnC0+SeiahEUxsmYtNh/28MQHc3TdE3imwQQQyHI
G2c8qNosWqc/yoAlgRwieeoP0ozBs9XxoJpBCN1fE8KZDi/ekpzQX6rY1IGChZQV
p2wU0oNJw539V6XcMoirlzWJLkpmHCEnZ8l2QAoGoGqWRNiQyRywnUILeH9V0GDp
D4iA98LPdRrGD665xx7gMziEqvm/m68Wmu1mTh/NmqPvSIGguA+Qt0zlO2ldwlAY
en7h1QpVqxHnB6nN0aQPcwscZW9ju58d908GHpKW5xZid/HMlmPIdAi0GmX5HuxT
M0ykrQ+xDrypXX8CAwEAAaOCAmUwggJhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
0V645brPSe5CbMiO5SITLl7zvsswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cub3RtYW5hZ2Vy
LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkC
BAIEgfQEgfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAAB
bXotya8AAAQDAEYwRAIgREiVh/b5km9Vx2U1vsYndZVNrevXVpkTSZ8BV8mXmfoC
IH60asT9bz0sSkjSh5amgNBk+TiI99HMXDQZj8dvJIzpAHYAY/Lbzeg7zCzPC3KE
J1drM6SNYXePvXWmOLHHaFRL2I0AAAFtei3JnQAABAMARzBFAiEAlaRRiEyGO3R0
zCN2utjLM/swAlYJyqUqj1gyJwt+b/cCIH/htGTx2+J+OT3cqHNhlRRZ7r5G0f5B
WadXyYYMl5vXMA0GCSqGSIb3DQEBCwUAA4IBAQA8q/HG+LdzUeS018Cx3EBtriIr
7v78WbvgeA2nnRVqGTk1Nxo+wPc8fClc2A+/Es/rq7RKh99+Dmb5bWGjKiwZOE6w
DtCvTnjg7khs9QE/Ow+vcfMmM+qrS2lqy6jRJnNbvkTTdCfTSIPkhYfdGxFzsKGo
YMjGwdEzRyxxSugqW9jFEIc+OFfN6GsGsThSrnieIkMWWu/eQu4V7H+C8JO10KrH
FRtonzbSbzKX/EzO6Anh0h/zoAc5Pf1HULzKyYtsi4+4RlpmIBL9XkX+w1rq3qgu
9NU3CTxjeMkPgcUnff4b/Wh7wTwiodWWfys0A81S3LK7IanGO6x++Uv7j/x4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314448746294194604832053538276893992498764
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 22:21:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 22:21:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.otmanager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732262927674738345098853101099873673629609859896630914397821389056535264714260769552797998313322659239682154611267099187676505316566277017215310220569201759145090889195772190774253107605970489291868738844602982814776773032853126069936826931777095751293501855511611438587180186100807648776785439270891961684855056214768832038481996037633853405271304816315756931237750925062316003378877028125382893665780047264589785790215237189604670813577284794374892889603858010731201466876982338460929907487937079894241685739575768340917062623017326147736084106897859485524928028935522743930691196400817133507648452148165551132186241187933876485370462931048124953977600142898560669950747285312479721258285573542874731045968726287512019932891607862917035236101860853389841157510683815029675905113752882041062456697242443416096444641883855656699465191279289478628717054886686915727199763311153656902864463644707760993974228949936928893198530717362098864725277363970733594897693735113283285319183727787422528083367365109615365187404406348660667561946267270366972704109771183463436333955883865980557490598670371061382399192138295303520858259280161847773430639916581931109052915680065954239317782668337282565737689728992899799265146482630305495011384703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d15eb8e5bacf49ee426cc88ee522132e5ef3becb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7a2dc9af0000040300463044022044489587f6f9926f55c76535bec62775954dadebd7569913499f0157c99799fa02207eb46ac4fd6f3d2c4a48d28796a680d064f93888f7d1cc5c34198fc76f248ce900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7a2dc99d000004030047304502210095a451884c863b7474cc2376bad8cb33fb30025609caa52a8f5832270b7e6ff702207fe1b464f1dbe27e393ddca87361951459eebe46d1fe4159a757c9860c979bd7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003cabf1c6f8b77351e4b4d7c0b1dc406dae222beefefc59bbe0780da79d156a193935371a3ec0f73c7c295cd80fbf12cfebabb44a87df7e0e66f96d61a32a2c19384eb00ed0af4e78e0ee486cf5013f3b0faf71f32633eaab4b696acba8d126735bbe44d37427d34883e48587dd1b1173b0a1a860c8c6c1d133472c714ae82a5bd8c510873e3857cde86b06b13852ae789e2243165aefde42ee15ec7f82f093b5d0aac7151b689f36d26f3297fc4ccee809e1d21ff3a007393dfd4750bccac98b6c8b8fb8465a662012fd5e45fec35aeadea82ef4d537093c6378c90f81c5277dfe1bfd687bc13c22a1d5967f2b3403cd52dcb2bb21a9c63bac7ef94bfb8ffc78