www.oxitec.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b0:37:59:27:19:65:d0:e9:6e:ee:60:64:79:58:a1:9d:c9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oxitec.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b0:37:59:27:19:65:d0:e9:6e:ee:60:64:79:58:a1:9d:c9
Serial Number (int): 321300124820580678632286177882855369186761
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:c6:38:42:a6:9e:95:36:19:a4:e4:8c:7f:1b:f4:93:3e:a3:ba:b6
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 42:b6:18:80:11:55:6c:5a:47:e1:e8:d0:80:d3:e1:21:f8:f1:58:5a
Fingerprint (sha256): 34:6e:86:4e:cb:28:9b:ed:25:66:f9:12:df:ab:e2:d3:31:e5:55:40:c7:8e:73:91:54:ce:fa:d1:75:4b:45:52

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.oxitec.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oxitec.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oxitec.com

Other certificates including the domain name oxitec.com

(limited to 100 certificates)
o.ssl.fastly.net
leephillips.dev
o.ssl.fastly.net
sharepoint.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
motokandemir.net
o.ssl.fastly.net
*.oxitec.com
oxitec.com
o.ssl.fastly.net
oxitec.com
dns-vetting1.map.fastly.net
oxitec.com
dns-vetting1.map.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
oxitec.com
oxitec.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
oxitecgis.oxitec.com
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
*.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
app.aju.ar
o.ssl.fastly.net
www.performingartslife.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
filmtech.world
*.oxitec.com
o.ssl.fastly.net
*.oxitec.com
o.ssl.fastly.net
app-link.oxitec.com
oxitec.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
lamafiatech.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
dns-vetting1.map.fastly.net
sharepoint.oxitec.com
oxitec.com
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.oxitec.com
o.ssl.fastly.net
www.oxitec.com
remote.oxitec.com
o.ssl.fastly.net
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
www.maximsupplies.com
dns-vetting1.map.fastly.net
o.ssl.fastly.net
o.ssl.fastly.net
remote.oxitec.com
o.ssl.fastly.net

Certificate

The complete raw certificate details for www.oxitec.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1brL9RPf7OblKKs1VBcA
li0kLMnHbkll6URTjRnidiB9WtopBhfdO0lSSOYs9VZ4ndiKQiuY08YVSUEYTU0L
kFoBlBEQyGSBwu3d28mCfN6Gqbak0kQDkzzpuJ1vogsSc58ImsNdY5flDDaYt2ZS
qRRo76FJMrZCKp05Mr7MMYqA/XFrZc13uhIwhFZiGAtNLU4g9u85uxjNPgK8Wx08
i///EgJDM8es+kuwXHt+4Uj7JpWzLqlNmOuqQz9x1D2wxg/oj/ZzQeqWGu9xpA24
JDZKKkOc1pksoiAJYUIswXtxzI7D5w0sFSB/FRFELZvIKVdpE9Z+W4G878MUOCt+
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321300124820580678632286177882855369186761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 05:08:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 05:08:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oxitec.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26980871847746351538850362360063460281591418963756397677513971228237949504124096571744646066249169535735275946759771427621732422893923966757682953401977651762414465926593430274074667466203706063169762274028170226404085525699044494621135051733421760237235877759527851233539579974596529603695236001967369587241970687883086750192711881504718337963539750225414631702845123584819696665576419615926246929604516717279755728478269411841542872834981624784950917676202215125334839187729915860961672121090179560122787639386892008425902306530506303706613793584166251277477195363513436575430407985800911396412026757628512822853311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68c63842a69e953619a4e48c7f1bf4933ea3bab6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxitec.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a4a35823b00000403004730450221009c672bf00d34bdb13f81aeba4cea333694657b801e350de6824a6c9f8e56d7d5022024b6c445a004f29ab61b9c0303c91137ed78cf26f51aaa222541ee2af8273d47007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a4a3582510000040300483046022100ec4daf03c98c4ddf4db5550fbb1af0a9bdeedac31304ea46d2bb53941d07d569022100852721b2bd4d743e7fc75539cc21bf808e64d0043c65eaa17af49f9318208d6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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