ovensmart.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b9:a8:9e:b3:bc:0e:c8:03:00:ec:8e:a0:82:b9:f5:6c:82 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ovensmart.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b9:a8:9e:b3:bc:0e:c8:03:00:ec:8e:a0:82:b9:f5:6c:82
Serial Number (int): 324513230007300658245825416584695456820354
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:7d:59:4a:55:58:a6:30:22:c1:e7:7c:6e:29:08:59:16:de:82:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:38:75:c6:21:d7:55:91:82:ae:9f:2c:85:68:1d:7d:e9:17:45:30
Fingerprint (sha256): 3c:1d:02:27:39:92:9a:23:40:8c:9b:5d:ec:12:47:d9:b8:3c:7d:29:a1:ae:50:b2:9b:10:64:fa:95:5b:c9:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ovensmart.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ovensmart.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ovensmart.com

Other certificates including the domain name ovensmart.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ovensmart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISA7monrO8DsgDAOyOoIK59WyCMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxMzMwNTNaFw0y
MDAxMTAxMzMwNTNaMBgxFjAUBgNVBAMTDW92ZW5zbWFydC5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDKrCHU+27qsXGOWNj3yHyxjWpPg9s859yz
gFYTV3JrHQni1IkO+QXn07fl1//VJxQDOcqKuiuacjhAV27kX/kJfetgNDfAfgC6
QAHvCVklF4h77+0xMfkHMqmAt9bzb4Gtb+13RMHY0uMKpm56PcuNY7WK61kCKOXQ
V5H7dwUGCqOTSd1C4WkOvVR7IFx936navxzQ7N1EhbVUHtjJ+v3maNWfmLZOk7BK
Qf9u0ll4ItdVi+NaeymyYBrYH2WqrB9yAJOQCHPMPYjD8FNJeIFY7+WCG5XAk6jL
y3+riNbXKZdIFMqtaArZkR8yvdDTTkuRjjwU3TKIILQtWif0F+uxgEgcS9TWdSNT
LdPuvoz7+huuRg/7KF787HMCm13nc33rsc4+BcN2IoYXjrCEE8JyaEgMudiKWKDD
I1zLrdqlqnoOrxHnxDALbdwcvup7HCLrdECLP68spbPjHhGase+mXpImePtogXhI
GMQvT5WqLLfjkXqD+HeN2nXnP/kb2DN/LbdmwQU2F2ahYliyUP2fw3lUA/RFbItn
M772mqJBGOVhHN2RLH9iXGN6mXR+lhyr67Dg2V0oPNx0cpwpssiM9BsAWYO7wv2j
aaR1omdtFdlcsbyrA3ouO2083XrXhWf1cXrRprOe4UF1lekzgGWSGfTgI5swnEel
m3BUDNYfuQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ0fVlK
VVimMCLB53xuKQhZFt6CMDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW92ZW5zbWFydC5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz
APEAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3AYSF2AAAE
AwBHMEUCIFrDX9JkLtmk4RQtecT5sBpjuhkXUtR62CeiMsl/ZyQzAiEAsqVdTkgJ
ZMC2HjBuSaDKCeAxiDJd7GAAJOUzv7cGXYwAdwBep3P531bA57U2SH3QSeAyepGa
DIShEhKEGHWWgXFFWAAAAW3AYSVwAAAEAwBIMEYCIQC/OiTHntU6f0FDmC6XYMZs
5+24+Bupv/Mo2yyDt13jAwIhAOO10MG8y2fQCzEZwDBTlsELa84UoEqc+t24qK6l
qP0GMA0GCSqGSIb3DQEBCwUAA4IBAQCJQubmBc9swsbiThA4f275Y9m6tFlWUwcs
ufVTkprYLgmMXB8CGRLbOFgw9MrH9BG5FP5F9s91s2+Dd52CCY6lF6jKCGsMeNCE
UbOoM6qb3p/u5g5VjtE+3qBKJSSFugF5/ZQhqUNdk+fs8ulXee9UHuacahMV3Qpc
WbNgaj5q8VUoebugtrSeBea4TcoLvCnR5lIdUcftlIBBCrXlnw6FA6D00QgtldOm
UDVCWZT2ubQNA9nt3WX+MPdEdG8eTKUC/9iq8LSusFpQu1BKsQffRHiYZd18HhxC
fYT5pevxM9AhVh20Rf8rsbZCVNx6M6oYHH9b8GizRzkP7VntVwK7
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324513230007300658245825416584695456820354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 13:30:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 13:30:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ovensmart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 826831218652363919186540579200313644104317597884914472456402215122399164196332242922135862104383964115945942513713962781064958301941986825569414490697803664083889680048157243480670966811079978713184393997248570983295488909158430635628087780052667895656870728594173571985124172319632803695252857600106255207344522897032674482133641655241006537841662071731271349130765376399428739374834441155232760640074467819632895959323709414270856493227301691077923172494921449110353353285445859776753691710592472397837774436803754219623974070165736897034937903733607995302185364033216084878479006440027180832964254210624219376689717391319190699438449882232225832785447822996890958148276420253044385814187963510246092240338241372196343972384165755127281916001780852526037303444548896191902691543249840949263187713311363000858377050971832710908507894987079231863678358166581877892568258229347686509498941453608601894199874226407747559099270216057903431884310900700081269120968250585581084852429530030260361408802100493299400913257089700776286472978032975936996204580613831685731637016368609514343201760056667793872593781587663282963593145198538224667696759525543414281552172657942037765920343041493897506466745828590501182147013594012369444436058041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							347d594a5558a63022c1e77c6e29085916de8230
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovensmart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc0612176000004030047304502205ac35fd2642ed9a4e1142d79c4f9b01a63ba191752d47ad827a232c97f672433022100b2a55d4e480964c0b61e306e49a0ca09e03188325dec600024e533bfb7065d8c0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc06125700000040300483046022100bf3a24c79ed53a7f4143982e9760c66ce7edb8f81ba9bff328db2c83b75de303022100e3b5d0c1bccb67d00b3119c0305396c10b6bce14a04a9cfaddb8a8aea5a8fd06
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008942e6e605cf6cc2c6e24e10387f6ef963d9bab4595653072cb9f553929ad82e098c5c1f021912db385830f4cac7f411b914fe45f6cf75b36f83779d82098ea517a8ca086b0c78d08451b3a833aa9bde9feee60e558ed13edea04a252485ba0179fd9421a9435d93e7ecf2e95779ef541ee69c6a1315dd0a5c59b3606a3e6af1552879bba0b6b49e05e6b84dca0bbc29d1e6521d51c7ed9480410ab5e59f0e8503a0f4d1082d95d3a65035425994f6b9b40d03d9eddd65fe30f744746f1e4ca502ffd8aaf0b4aeb05a50bb504ab107df44789865dd7c1e1c427d84f9a5ebf133d021561db445ff2bb1b64254dc7a33aa181c7f5bf068b347390fed59ed5702bb