om.to

Issued by R3

About this certificate

This digital certificate with serial number 04:e1:4a:bb:4e:c1:65:b4:a3:bb:c2:78:b6:4a:86:7c:43:9b was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=om.to

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:e1:4a:bb:4e:c1:65:b4:a3:bb:c2:78:b6:4a:86:7c:43:9b
Serial Number (int): 425112011712803231469048389316392657896347
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fc:d7:0c:2b:f2:03:1e:73:81:ed:94:c6:9d:77:ce:6f:c6:ff:23:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:87:38:a4:99:6a:91:ba:a7:4f:17:a6:80:29:f8:8b:1b:c6:ef:65
Fingerprint (sha256): 47:eb:52:47:dd:84:fc:d5:5e:24:d3:a8:a0:94:9e:d0:27:82:38:7a:9c:05:e5:99:d6:2a:a6:f4:b9:83:57:12

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate om.to

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for om.to

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

om.to
www.om.to

Other certificates including the domain name om.to

(limited to 100 certificates)

Certificate

The complete raw certificate details for om.to in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAt/WJiD7rktva70uAjctf
DHAmY4NcTCNwd5AqZr1cI8y5uQNmdm3gJwNKy5GJtJ6/FJ2lAcXE4471pw4gWMZy
wKYNmIM1HR+WiptPcNpEh06X5NCVCcjG8JhdsZaRucK7TmA1gHWmi1OidQ82U20Q
XsAZ3/l+0l7K/euEdf87uZ2bfSOuSPT8tmXNPKX4vk2XADGxMn/nprf5iyAX8hCY
bTxmkDrykDXaRAwOSvq/w8fQHoaA0WqtOOTm2xVhXTsJZdWCTS9XxjpEOW/JPe8o
wLeFOdahjhItjSwDSd02Ukqg8qRW3PDnfZk5kbiPDjTmIU1IqkxAzh+4M8ONH0W5
HgbGSv0p+HHwJJXi1oT3pWiZqIqIxra1b6bqg/50/aOk/cRTvA0PAbXbLjCE0YK5
H0Tbs96TQdqGS4HebfDsw7rlqS3msWZ09HZBIpv9Z1MbElc7jovSvK6r4bZOjQ6+
qjYQ9xnXs5+wDx/ECByojhjwV4OqgiIm5++dzjE+xZWgk2CJAs1AK4wUNoaUlXhk
wmdeSkBudJTfvNf1/XiBLpsQqRUPWF4jikyPaUPZRoPM/CjqXW27o1cdCbkEA+Ub
7+8sa+EpICfKmMTxclvYZ07ZPb55PNpqv7pFAUpgHvRSC1lDcUnDT9/scselCZm3
7OouFBbQ2JNhdzPWpIYEBOcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 425112011712803231469048389316392657896347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 14:31:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 14:30:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'om.to'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750487772748636335577126929521974348333983941798549256987452034084109294333237682572109510602730106352379516566326850161696613866529266958599869280735524009263099023066365968626074283800342263732834427319296390592878671105209137447004944814963061606790419325811059330796677739133904564181944013060139467126954086936546483383528890962053456017384508797312937433446900568593533039051275393208296327615028747185430638588510121119903837034928597779050942835502165953713390842867400007426071606426930536040115762650886287929719694343869615805658883135985017155098689795177721874979002099238261003571983274064340906406495098041628440932410736419614961699691404688884540477769787194174130933065910834710962641604381702615540297483246349711963334610826701673188229431215855142757145054258844084539404086832884772943653338109079976513363725571933233708790346516855294425291333983352226146057650322049432239595621300924578239597686068918939870825444272315784340180714299094243636398098883327539780652342575278436096810685489211060391184715821078188522424961118769835486471336405735745103959540049852572872938838053164168790532018904347860860899373140022862478195079951795795060784389591798735979944206432520904670323489485393392436955870135527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fcd70c2bf2031e7381ed94c69d77ce6fc6ff23a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.om.to'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2fa170240000040300473045022100c8715c9640fb8c74fad6d06ae18344a4511a2f6585855e9f04d9933ed0afc4e50220762ecdad6b65b674f709f303745b862b8257de28b26a3e96a6e1dc8898715da0007600dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2fa170dc000004030047304502206e1cac7cd1c258a8f56ee61cab8fa2b74479638066ad6c63e0782d3609e6a59d022100f335065be539981bf44985ba9304b8cb7562426e82c0d38a8b1c585087317620
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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