ovemp.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:1f:d5:b0:8d:81:6a:e0:30:ae:ce:f1:61:62:28:11:0b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ovemp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:1f:d5:b0:8d:81:6a:e0:30:ae:ce:f1:61:62:28:11:0b
Serial Number (int): 286560068555445700474823545501046536671499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1c:47:09:25:80:48:d3:eb:fe:c7:49:96:fd:cb:63:ca:8d:f3:22:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:c2:92:0a:53:f7:e9:7a:70:2d:54:ca:b8:9e:90:50:f5:41:31:2e
Fingerprint (sha256): 2f:8a:dd:20:e1:1f:09:86:60:15:44:9c:80:b5:6a:a4:4f:98:7d:86:ad:4f:c2:6e:cf:d6:7f:e7:19:3c:3f:8f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ovemp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ovemp.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ovemp.com

Other certificates including the domain name ovemp.com

(limited to 100 certificates)
www.ovemp.com
ovemp.com
www.ovemp.com
www.ovemp.com
ovemp.com
www.ovemp.com
ovemp.com
ovemp.com

Certificate

The complete raw certificate details for ovemp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286560068555445700474823545501046536671499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 22:14:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-27 22:14:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ovemp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771984931895041852154814010987668537725970395261626689592584879788417721505208019702388796461719114303618232875413748541109941268457391241579865627975950932291976701359421928121770150308241431225732972387581086458955003742682100963677400293175112235791390858562680489361804763461480966401144247038606314574100436445265293004920041574476457052247957807008793320776187835004812000447261047567180823800968729383487840415308895428172526772911828348818510101555929100157484905959811878430125547596490575580994681876465983757111019895946017882169491135089323800349175019980041226209367434593910646271280301210778682370408704215275503875688727878110107677078604096576429722125029111181108634857241147549334156735970762998423536603512976948630506353889158810753393721983403140455126051851633586019379936894535373532826384935191165800864369310283525759027318354325248999266472594221215566708342230261233492960102138715845385916031034998829600344481455307447194708448350932663139700459095828687169083970125354041648223240677630013387594234498070364959767154088810333385437303045526985318920212924094718649879081206112539397251838555671300729971889579099332568118130274647360092462331124799256497686911986673049393841703439614196340405437515257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c4709258048d3ebfec74996fdcb63ca8df32248
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovemp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001712892c7bd00000403004830460221009f836e93c52b6fa2fd3a25ccf4bf65edf59cbaff2a9bf19bb55a403ffa10a5e4022100cd68050d428da367e1ecd664b02fef08693859d78872d0950e97cb671112ce9c0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001712892c805000004030047304502202b076f87149ed1eab536eea091191c99dff6c01ad837b795b19f846750e603bf022100e5295772f34533ca5028548c9aa03aa7de5ec776ef805b38c19a40e75771daaf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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