ocgco.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:a3:b2:e6:83:41:49:ff:ab:14:bb:70:93:f7:95:af:e7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ocgco.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:a3:b2:e6:83:41:49:ff:ab:14:bb:70:93:f7:95:af:e7
Serial Number (int): 306131440929430743254010356370196919594983
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 77:bc:7f:56:53:b5:e3:af:97:07:18:fe:ee:9d:e0:66:12:77:a8:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:f2:d8:0c:a2:1b:22:ef:88:2a:dc:42:37:13:3e:06:e9:11:61:ea
Fingerprint (sha256): 24:ec:d9:90:18:da:0a:78:f6:5d:12:1c:ba:6b:bb:f0:c5:77:53:47:f0:fa:fa:3f:9c:df:46:f2:75:89:e6:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ocgco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocgco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocgco.com

Other certificates including the domain name ocgco.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ocgco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvboIRhoqmNYqjZCIUMBz
2+0RJJUJowwTqep9qOFoePs0eF+BqM7IXeS6jjT6ZpTK0MPfzMyxPa3RCjrBe+VM
1QeLiqFAWmR7iqvcctK9HslcpzHvxyND17snGBht4svUzrCq3+yGIlX/1W91y3jd
A2OQI/5ia7F5Issgleqx5VAmyto3DLfEXuEp5vf+BrX4LgoOKd1adUMUBHOWtsq1
WOdiK//OY25+XmI3WmN3Rnzp96p2DKeg/3iY4gPZICNNj3ekpBfMG0VPhxcC9707
HeTkyo2A+RzJpLdv+gVbZ99ElQJtHikIxUo+gkD3c/W54BL9oooRAeRXh85aDpvX
jHxdRxY9CR4Q7tgGvguj2wsEQ+hl5O0zzBkI/XObiIdl8lEJgoHQCl9ITZBM7pZU
aHd94Axo+TPf/YWbIOFn0GUjXluzz3CbSSutDcLHWL3/5tGaGfjQNYK7m4zcYiXf
+vrkfBqZQa5mdN7DxZbdUyd5QOdTtUUmTtuvV+DfdqvZ+PuMhMvS8EdRyXhNt+OR
gZUZMK3FGdmxwlbwU5fOjezFsRWirNUs2ZUigcYYmANp4pynx2HXt2BnWh1zpGKX
mwnXMa4Euhg7InPuiyEeHl687mJxMhRy5lLw7lE/RLQs/Bco56b6Ta3iBF8l3EBC
xyiakkgZo4ekAb2JJCIdb88CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306131440929430743254010356370196919594983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 22:35:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 22:35:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocgco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 774017360298857201093490236269932095119007591258747982908786443583458842721516833193724999562883451753223589011689985419693489812726071371874089702505129344290384431480026783194528694700801279825515452822203854013207667186454130762066595681474402632090914639925620650320857280796364417303955576008911737663557088539053006075193163884380494471621980591390109147733698886252961185736815264074226415767802058999547869628527259553148873139215373720226224798093237392960856435542078670109232700405479735316593528112877231824561274647298235733491288257746510044030172453966243365666575778151566384383919089853674674277848998905948756408214945185730665481789321920814354540663704020979813276745295946676614681229063576408699046307665357460637905506796200962501914309723462288035678513679301921031222438701167914831711854776346902025497525439674906222328800803355683041644766741436291426387293962020444464503300923183543271064642926302671720410675824210542977018487179584822840979406891554191962135037847802417839359073505223028472844317855144872582084915168572031665908522141426458263951783862705411070189425571204287699004938132572664108669166933500839950604075999009586647896241622382799069745911333547891269668095616299482478280353607631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77bc7f5653b5e3af970718feee9de0661277a891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocgco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f1110aaef0000040300473045022100df16ba45d676f651a04d34d4af359ca2390e82b6318578122e49b140f4d52a7f02204b9f1844b812e6201e34d893a70ad60e9ca0e6bdf51f8c6aba8954072a132ffe00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f1110ab0a0000040300473045022100e236d2fc7da03b93067e722ee33551f10090d8b6af08489c34992f63c08d4d9c022007974ecb3a8e4b33cf20f3a5f654cd857dc136c3f4e67a39fa8f2df47f753be1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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