straightbytes.okdata.com

Issued by R3

About this certificate

This digital certificate with serial number 03:99:4c:b1:b2:cd:93:fd:f4:f9:33:fc:f7:ca:3a:69:9a:68 was issued on by Let's Encrypt.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=straightbytes.okdata.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:99:4c:b1:b2:cd:93:fd:f4:f9:33:fc:f7:ca:3a:69:9a:68
Serial Number (int): 313502003924964423197550984810646194461288
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:43:17:0b:66:90:5c:26:1a:93:01:f7:53:e6:28:16:b2:88:9f:c5
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5f:a0:98:17:84:2b:cb:a1:fe:ab:1c:f2:ab:90:1e:5b:e4:88:e7:c3
Fingerprint (sha256): 49:59:1c:82:91:59:6e:4a:0f:56:8b:75:b0:aa:cb:ad:69:de:ed:02:3a:d7:51:67:da:91:72:e0:c8:15:8f:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate straightbytes.okdata.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for straightbytes.okdata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.terranco.com
cpcalendars.terranco.com
cpcontacts.terranco.com
forgedinfactcom.okdata.com
mail.terranco.com
oasmiles.okdata.com
orthodontic-associates.okdata.com
quantum-church.okdata.com
straightbytes.okdata.com
terranco-net.okdata.com
terranco.com
terranco.okdata.com
terrawall-net.okdata.com
webdisk.terranco.com
webmail.terranco.com
www.forgedinfactcom.okdata.com
www.oasmiles.okdata.com
www.orthodontic-associates.okdata.com
www.quantum-church.okdata.com
www.straightbytes.okdata.com
www.terranco-net.okdata.com
www.terranco.com
www.terranco.okdata.com
www.terrawall-net.okdata.com

Other certificates including the domain name okdata.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for straightbytes.okdata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iLrqeEt+MJxqXfMzdUk
j4YKmIOXn9CrB1oPSaQaa4XnhUoqMxvNHk07l4MLk/83q/ruat/ilho9C8i3didP
4i9Yxuq3r8FaOqweSltSFhkV2omci34HgiKHUmRCicX2e6GVeiAFUdy12oue2zAJ
HqqsFzvFIRaTAW2rirRAd2qxFk0P2qigm1WBgqF8qtnrR8uA0wPzv2/5UiiNSia4
s3x9CQT2loCQ23RgWQIN7yMK6AjBFUreG8zt2MI5X6vKDpaHqnyf3w4mLzJhcnVa
5+c6X47fKtIQYFaQpi9aWo3ZcV+3YNTVo9s8MEEz9NErnbP2rljnT8WusJjZdRNJ
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 313502003924964423197550984810646194461288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 05:17:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 05:17:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'straightbytes.okdata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30566889772166562946449280746883482515353759246468726659380068484186828534298809122763749564278918690679071913225013618038737590175360710849200437649570323722437185640746403068428427488530923091959791224877171029346951862170654112565860358683211172535631434832552271857819826563944669265497147728386454137851115354004967750573232106306722108158573833149094772889390437318293993395182728186817262882758255535935049595885138965686047930490569032379630310313006483477245481591955253017836342281945260834281104731305999062525544942001449058576297115847252589259673915369517238686920211083973343785187760910738598592203181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb43170b66905c261a9301f753e62816b2889fc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (621 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcalendars.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpcontacts.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forgedinfactcom.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oasmiles.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orthodontic-associates.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quantum-church.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'straightbytes.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terranco-net.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terranco.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terrawall-net.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forgedinfactcom.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oasmiles.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orthodontic-associates.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quantum-church.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.straightbytes.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terranco-net.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terranco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terranco.okdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terrawall-net.okdata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018aac1608f10000040300473045022100dbc5585d4464fca120e91205714eb8193188cfd0edf1f01341203c7d4e0b9e0a02205191f14ecd00d924ea6b5631344b275fa9887b42be68dfd9166833d052d06ee80075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aac1608fc00000403004630440220747c043cc52d62d2fdbfb45c15ebd0327db95490bc00a1dde69974072721d75602203e52207208a9accf5a01c15b3c7eba06f890435f76c0ffd15e8453c983a57a77
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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