www.ovenmarket.com

Issued by R3

About this certificate

This digital certificate with serial number 03:7a:b3:ce:31:8c:6a:c9:6c:97:e8:1a:19:76:a9:06:b8:c2 was issued on by Let's Encrypt.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ovenmarket.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:b3:ce:31:8c:6a:c9:6c:97:e8:1a:19:76:a9:06:b8:c2
Serial Number (int): 303090308988996652847022085727783569766594
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:68:47:71:a7:bc:49:fd:7d:64:64:35:94:d9:83:0c:f9:f6:00:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:22:37:b0:91:7b:71:ff:fb:2c:ca:48:fc:6f:2c:32:80:52:ac:64
Fingerprint (sha256): 43:15:30:c0:0f:d8:85:d2:de:b1:97:e9:32:89:4d:5a:56:1e:2a:b9:af:08:d8:51:80:25:2b:27:cf:b8:11:60

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.ovenmarket.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ovenmarket.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.ovenmarket.com
cpcalendars.ovenmarket.com
cpcontacts.ovenmarket.com
mail.ovenmarket.com
ovenmarket.com
webdisk.ovenmarket.com
webmail.ovenmarket.com
www.ovenmarket.com

Other certificates including the domain name ovenmarket.com

(limited to 100 certificates)
ovenmarket.com
ovenmarket.com
www.ovenmarket.com
olivecbd.com
www.ovenmarket.com
ovenmarket.com

Certificate

The complete raw certificate details for www.ovenmarket.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISA3qzzjGMaslsl+gaGXapBrjCMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzEwMTcyMDUxMzNaFw0yNDAxMTUyMDUxMzJaMB0xGzAZBgNVBAMT
End3dy5vdmVubWFya2V0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANcCBk5Wee+2lANBw4LS0DeQOpPe7RIqhzjqYms1OXaQE8aZpW3LXbQjV0D7
50nuB/CLavCdFdh/QdPy3tSsL1puAxOie64+NQUCbvgT8L/IOj8URb65SlEwEt2a
4gs9tF4rCZvM75BUlQsAGSE+XaUw9PoW3YwhsQIDnwjhDv2/eZzbSSWyT1B6eNtu
Vyc4rL744PK1WHHFWEqSqMaiHK82QhHTg40Xvz8UERw7HMgnjK9UThDyUHaYvYfV
Nim06E32j1g9FezKKobDP/mRoccjJJesnvETD3/J0olw0IHZcmrl98GPQpT3uW8Q
o1Ki1qD7wXk06g468N5KEOPw0l0CAwEAAaOCArkwggK1MA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUHmhHcae8Sf19ZGQ1lNmDDPn2AG0wHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wgcIGA1UdEQSBujCBt4IVY3BhbmVsLm92ZW5tYXJrZXQuY29tghpjcGNh
bGVuZGFycy5vdmVubWFya2V0LmNvbYIZY3Bjb250YWN0cy5vdmVubWFya2V0LmNv
bYITbWFpbC5vdmVubWFya2V0LmNvbYIOb3Zlbm1hcmtldC5jb22CFndlYmRpc2su
b3Zlbm1hcmtldC5jb22CFndlYm1haWwub3Zlbm1hcmtldC5jb22CEnd3dy5vdmVu
bWFya2V0LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQMGCisGAQQB1nkCBAIE
gfQEgfEA7wB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiz+f
aJYAAAQDAEcwRQIhAJMbunwqkSwJ+laKSqZcd92boEliRz9D3cQTWVuYYJWhAiAa
O8NQupkVmCOqJ/0sPeDDXT1Sgn0+wSCBe/EYAl4kGwB1ADtTd3U+LbmAToswWwb+
QDtn2E/D9Me9AA0tcm/h+tQXAAABiz+faI0AAAQDAEYwRAIgf3vGmgdr6qHGLf8q
nLbbtTq6axMzUFt4UCxBptEMMfoCICcBrpSbFskg9DqQ3NBHogA9xnkqspqIGP99
DNNo5dTlMA0GCSqGSIb3DQEBCwUAA4IBAQBx5+rdd3KSCX3zPTbzO28MUsLzjhPx
OCydgTqe8+4Cersw8oUlESiikdhUDeoLOwLTVIRxuyLgu2nT+eAfIP+ihsb1fAF6
VeDkd/uCUID7hoa6nyHLjN0MQ4L29wjrrald4vIj6baJo1VKXyziydooEzZBRhsN
1l4+wTmzBFQ1NkV5uHopP7UEivaVGYDPE/zo3QNALuHnHj9IzStUKNv6G1r9o7vn
7upp3BtuB8mPFALj0VEDqIGEra6IO30Dux02ey/Iq4nG93XiEPDWnDZfK50kMGol
86qxHzowaGVSqbLQVO8+Fr3kkVbgHBCekECzNa2WGA1aSe9B9hp4x6in
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wIGTlZ577aUA0HDgtLQ
N5A6k97tEiqHOOpiazU5dpATxpmlbctdtCNXQPvnSe4H8Itq8J0V2H9B0/Le1Kwv
Wm4DE6J7rj41BQJu+BPwv8g6PxRFvrlKUTAS3ZriCz20XisJm8zvkFSVCwAZIT5d
pTD0+hbdjCGxAgOfCOEO/b95nNtJJbJPUHp4225XJzisvvjg8rVYccVYSpKoxqIc
rzZCEdODjRe/PxQRHDscyCeMr1ROEPJQdpi9h9U2KbToTfaPWD0V7MoqhsM/+ZGh
xyMkl6ye8RMPf8nSiXDQgdlyauX3wY9ClPe5bxCjUqLWoPvBeTTqDjrw3koQ4/DS
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303090308988996652847022085727783569766594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 20:51:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 20:51:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ovenmarket.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27142233951366245372107300058808130476320762656915108196594978049541702149195470927889671329585354952880712022692025963436781859660595559087824002232149028866684026914615046855192875581522470445327848526184553418657446133669893246731618353005521112417835175354543140271704769421909586342196234713797297102482415783855371982206676974580436763133901337884500163141675844562859923900277348728722528839787889087775994281611000125944903779821966493689329084292571486380643639935966386551239422722554305320624502968272948825071685436642184686262484044665476779068420630668483088348862832271671187717530763598199578690638429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e684771a7bc49fd7d64643594d9830cf9f6006d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ovenmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovenmarket.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3f9f68960000040300473045022100931bba7c2a912c09fa568a4aa65c77dd9ba04962473f43ddc413595b986095a102201a3bc350ba99159823aa27fd2c3de0c35d3d52827d3ec120817bf118025e241b0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018b3f9f688d000004030046304402207f7bc69a076beaa1c62dff2a9cb6dbb53aba6b1333505b78502c41a6d10c31fa02202701ae949b16c920f43a90dcd047a2003dc6792ab29a8818ff7d0cd368e5d4e5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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