forms.ostratto.com

Issued by R3

About this certificate

This digital certificate with serial number 03:6a:f6:d1:1c:33:5b:b7:33:20:84:95:42:3c:5d:15:29:f1 was issued on by Let's Encrypt.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=forms.ostratto.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:6a:f6:d1:1c:33:5b:b7:33:20:84:95:42:3c:5d:15:29:f1
Serial Number (int): 297734864537883229951931631323836067424753
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:65:9f:bf:67:fa:71:4c:8e:3f:cd:03:2b:e2:4f:2b:62:86:97:61
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:31:ff:2e:3a:bd:54:25:c3:aa:89:64:c2:88:bb:30:78:fd:de:4f
Fingerprint (sha256): 29:35:78:6c:65:c5:48:96:66:aa:04:fe:6b:f3:02:c0:86:a9:8f:d0:b3:8d:23:c4:72:71:36:a4:67:d8:9b:99

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate forms.ostratto.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for forms.ostratto.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enquires.burrells.co.uk
forms.accountingandbeyond.co.uk
forms.ostratto.com
forms.prxl.eu
forms.sierrarural.es
formulario.faeburgos.org
lunchkeuze.sfeervolleruimte.nl
smartforms.reliancehightech.co.uk
verify.nebeus.com

Other certificates including the domain name ostratto.com

(limited to 100 certificates)
offers.procurelynx.com
*.rmm.support.ostratto.com
www.ostratto.com
sprints.eximie.at
hullin.internetjurisdiction.net
booknow.health-workforce.eu
portal.webdesigntilburg.nl
support.ostratto.com
learn.faremex.de
sign.medify.com
support.ostratto.com
formacion.heel.es
support.sparks.gmbh
forms.ostratto.com
ostratto.com
www.ecofarmings.com
ceffcentral.ceffage.com
fernwartung.pdr.cloud
careers.ostratto.com
er-go.erecruiter.net
factura.faeburgos.org
books.fischl-ediservice.de
ostratto.com
subscriptions.cs.zohohost.eu
support.cartakeback.co.nz
surveys.ostratto.com
surveys.ostratto.com
subscriptions.cs.zohohost.eu
factura.faeburgos.org
subscriptions.cs.zohohost.eu
hr.stataresolutions.com
ostratto.com
support.manageditservices.co.uk
vfhhm50.buchung.pdr.cloud
gestion.aclass.es
www.ostratto.com
jobs.datrix.it
support.ostratto.com
webinar.just-barcamps.com
learn.growmo.re
helpdesk.iview.co.uk
projects.link4pay.com
projecten.rgjb.nl
factura.faeburgos.org
expense.dyrtyinc.com
hulp.hizu.nl
support.x3consulting.com
*.ostratto.com
meet.carbontool.com
support.ostratto.com
ostratto.com
projects.spektrum.consulting
subscriptions.cs.zohohost.eu
projects.surmount.group
projects.internetjurisdiction.net
surveys.ostratto.com
projects.forecast.media
support.hanhaa.com
billing.ostratto.com
support.gamecreator.io
proyectos.beonlinesoluciones.com
projects.cdm-uk.com
jobs.yannolivier.com
www.ostratto.com
*.zob.signup.ostratto.com
ostratto.com
support.ostratto.com
supporto.gruppofixit.com
support.redkubes.com
jkeu.assist-domain.com
*.ostratto.com
support.riedeberger.digital
support.ostratto.com
*.ostratto.com
www.ostratto.com
support.ostratto.com
projects.diavicom.com
webinar.adaptech.de
hr.stataresolutions.com
crm.primevestcp.com
qms.maxintime.de
project.hermodcreationagency.com
careers.ostratto.com
bookings.ostratto.com
remoto.aeforma.es
facturacion.beonlinesoluciones.com
care.coherenze.com
surveys.ostratto.com
crm.primevestcp.com
erp.partnernet-ict.com
*.ostratto.com
surveys.ostratto.com
put.racioapp.com
finance.zkracht.nl
booking.neocorp.fr
finance.ostratto.com
appointments.rockstaff.com
books.a2zcloud.com
zoho.salvemedica.pl
subscriptions.cs.zohohost.eu

Certificate

The complete raw certificate details for forms.ostratto.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox3vJofnK4xG76KVvgR9
TIN9vUt9KQMquP42eDqbgV5y8Wf97jYynMgiCufXGJqIS3y6expCyWlwwqN9ZBFm
n9E1PvUjieZgi0k8m+sMBP++BGMNw0NfdvYET+mNPOiKTlLu1ufJQ7Uq54TpV8CP
0tAEOt51cmLAT1hrSK5jyogbnAkH8ddWapaBdmI1acnAUPBhxv9XyPowcgoayWQk
MaY3jaMXzj4o8nhqrF0onOMnqUL/29R7x2vCWjwg1/3RMs85D6QY4ESF20yJm2oo
0VIeEfEoicoWDvP0/+VHijs7T1CKRNGkpQr4snL5aZ4igQMo42USJ64sMUBnMgss
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297734864537883229951931631323836067424753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 05:20:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 05:20:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forms.ostratto.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20591604804609700351323085029403338276336671267360058961269138481195035131963808161867405557245402537458506612668831543353820621529807722795362847778184638850239236597218064966098654180779768060732042692134596968202540071790490958308356034181148791257449181161246112665128598362669663176803792447239600698143458583443889832044042705127519400846736279307322228896239959949353883108941003944834221507450833058371266448939207695522646659991477952455324963783903886181350517390160077110275094511524606034617630909386622874340465939638223136815771134610573769461186296314357265346756631775719225745346613251558464861973737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6c659fbf67fa714c8e3fcd032be24f2b62869761
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enquires.burrells.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.accountingandbeyond.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.ostratto.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.prxl.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.sierrarural.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulario.faeburgos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunchkeuze.sfeervolleruimte.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartforms.reliancehightech.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.nebeus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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