www.ottokun.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:0f:59:e3:42:f7:df:dc:1f:4c:42:23:a0:4e:d3:87:c5:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ottokun.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0f:59:e3:42:f7:df:dc:1f:4c:42:23:a0:4e:d3:87:c5:e3
Serial Number (int): 353672860532144479707710426255158889924067
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 7e:6c:f5:38:64:fe:cf:64:d4:8d:88:54:38:b5:40:00:31:89:f1:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b3:5a:4b:a6:b8:a1:c0:c6:4b:f7:1f:d8:f5:7d:38:24:90:e9:15:71
Fingerprint (sha256): 32:5c:70:26:ca:4f:55:46:ea:db:23:db:c2:b4:35:22:53:2b:9e:3c:4b:44:ec:39:fa:5e:57:6f:85:58:41:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ottokun.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ottokun.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ottokun.com

Other certificates including the domain name ottokun.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ottokun.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 353672860532144479707710426255158889924067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 08:29:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 08:29:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ottokun.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826115061829490996105189250288739985655430093325767683353327718501179804548486898921684509846493424994125341877853401239485726755566485721988603574585960223054586023070057388427672675969165982495377692192027538198654677256374420961135690242853397304010922792860462483657790084719882437376448440469775812712898859157283410392915138413696104122174161863018990136557864651112779374935317448164246364612173646096195175483393672172453968630321262938640907305211225139770816210521369392252194195066931313288532042161938272560660975039978602493372084578907043718088950877585050421412701430949826549786923514682792534747325320754106656912034269283536546864299742168206777528687949911797830876965611872996865760495865486694584971450632276418661821922888774763548260697197822390192034253279955709524642321857530055146226191156183184106921581163283899640038955126264615061058696572210683586927660414246472872778253880093534689562103775390113877482881006588256973457609394574999782180514123148349144030162080598961888239158101235044363198776035099437144237799105802927080494481932389529624162787923227230005863182137915010682768637873954958758778107709193830530347519552287214891447309767115945109081955317260080776835369327086978309876609167557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e6cf53864fecf64d48d885438b540003189f1ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottokun.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001701efb4f920000040300483046022100d7f31e97f97c6bc7fad6edb2e67ec4683ae3632ad218fad0feaf8e98a8406d1e022100a79923ba782213349d46cdcde0d2e74b7c44e845420e356986c4a7c41442c8b10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001701efb502300000403004730450220768eb744752a1776378fb705806c542ac37dddb057540e109582c4c660eca2070221008d9e90aeba725d1713cf2474edd23b8f9d13ca817f80fb4181e019d79e7361f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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