oxyl.net

Issued by R3

About this certificate

This digital certificate with serial number 03:e7:9b:20:b8:2d:73:0f:8e:b4:52:e4:49:07:1c:37:d7:6e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oxyl.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e7:9b:20:b8:2d:73:0f:8e:b4:52:e4:49:07:1c:37:d7:6e
Serial Number (int): 340148284782427904043663865474965143279470
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:7b:c5:87:b6:6d:54:2c:95:d7:bf:0f:54:f9:93:b6:41:e9:f9:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 8b:e5:20:f3:c6:a3:20:dd:83:4c:58:4e:7b:2c:60:98:fb:f4:9c:ed
Fingerprint (sha256): 52:ff:b9:6d:2c:57:05:14:a7:77:77:1d:8c:bb:b8:58:78:f3:3d:a2:68:8d:98:18:be:1a:57:94:36:fe:c7:44

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oxyl.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oxyl.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oxyl.net
www.oxyl.net

Other certificates including the domain name oxyl.net

(limited to 100 certificates)
eta.oxyl.net
alfa.oxyl.net
owncloud.oxyl.net
www.oxyl.net
blogg.oxyl.net
blogg.oxyl.net
www.oxyl.net
owncloud.oxyl.net
alfa.oxyl.net
owncloud.oxyl.net
blogg.oxyl.net
oxylwiki.oxyl.net
www.oxyl.net
www.oxyl.net
blogg.oxyl.net
blogg.oxyl.net
blogg.oxyl.net
www.blogg.oxyl.net
www.oxyl.net
blogg.oxyl.net
eta.oxyl.net
owncloud-2.oxyl.net
blogg.oxyl.net
alfa.oxyl.net
alfa.oxyl.net
alfa.oxyl.net
www.blogg.oxyl.net
blogg.oxyl.net
www.oxyl.net
www.oxyl.net
www.oxyl.net
www.oxyl.net
epsilon.oxyl.net
delta.oxyl.net
eta.oxyl.net
oxylwiki.oxyl.net
oxylwiki.oxyl.net
delta.oxyl.net
www.oxyl.net
alfa.oxyl.net
blogg.oxyl.net
alfa.oxyl.net
stugan.oxyl.net
oxyl.net
blogg.oxyl.net
www.oxyl.net
www.oxyl.net
owncloud-2.oxyl.net
blogg.oxyl.net
www.oxyl.net
alfa.oxyl.net
blogg.oxyl.net
www.oxyl.net
oxyl.net
www.blogg.oxyl.net
alfa.oxyl.net
www.oxyl.net
www.oxyl.net
stugan.oxyl.net
alfa.oxyl.net
eta.oxyl.net
alfa.oxyl.net
epsilon.oxyl.net
cloud-2.oxyl.net
blogg.oxyl.net
blogg.oxyl.net
www.oxyl.net
www.oxyl.net
blogg.oxyl.net
cloud-2.oxyl.net
eta.oxyl.net
alfa.oxyl.net
alfa.oxyl.net
delta.oxyl.net
www.oxyl.net
epsilon.oxyl.net
www.oxyl.net
blogg.oxyl.net
owncloud.oxyl.net
www.oxyl.net
www.oxyl.net
www.oxyl.net
epsilon.oxyl.net
www.oxyl.net
blogg.oxyl.net
alfa.oxyl.net
alfa.oxyl.net
cloud-2.oxyl.net
www.blogg.oxyl.net
alfa.oxyl.net
stugan.oxyl.net
epsilon.oxyl.net
epsilon.oxyl.net
alfa.oxyl.net
www.oxyl.net
epsilon.oxyl.net
alfa.oxyl.net
blogg.oxyl.net
eta.oxyl.net
www.blogg.oxyl.net

Certificate

The complete raw certificate details for oxyl.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgISA+ebILgtcw+OtFLkSQccN9duMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMjcwMjAwNDZaFw0yNDA2MjUwMjAwNDVaMBMxETAPBgNVBAMT
CG94eWwubmV0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs3ZLc/Xr
GqM3xQ4pfWln4+WDyVhYI5+cF3N4nkfmt7h7vvU7Iy0zRIUu//CF5JIouddYEWJX
BZ7EQpkVXjVUiyP3dddbA7AidP6upjG0MPhcDDITew6Db7C13fq5xUtVaoUsaPnE
oFMxMM929r7/lcAL1Q9bz3kFGgksyv4WiYr3SjOVZBOoxnSfbK++AwV/ljuyrn36
UzyX5oQY6Fusm1+M86MDaBEEii5Zwa78FCwvLbRvDHs89FVx9bUw+DwgFK0ItF1J
iw/YWkAK+hCzb01yy8qDwkp8aQoX7uN5fn6irrGLoqss+mSTGdKc8xufbNXW7tim
FmUS7rifXuI+udxnoS/pmbw1uxvvh1sjr+Hbuh3YOXkoqfVBQ0x39/qhZcyzwNpG
O6K+mBhPzlOLYbHMPbal+uPJsvPhe9olacTgGR86OzOrWgFEKNaz87J34u/EUMdn
NtrxivLgZGYn/Dts3kwBxCi5iohj47JLfkDy8XlG4Isb4W+R20f326BS+d5K6txW
xaR3fwU5OmC9qu8tv4empTWIxCLJP82Fkejjjcs+RR3WyRy/JFfmid6KKZHJqdxK
aQ3LebO7zdojXOmLxMO81Xfbg0Pei/TH9hrV+yMG0XW7QxeFpdnF68aTRmqzlwpq
4j6L1T+D6TpD1wG01t8p/LTYpirfmy9nZ6UCAwEAAaOCAhkwggIVMA4GA1UdDwEB
/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/
BAIwADAdBgNVHQ4EFgQU2nvFh7ZtVCyV178PVPmTtkHp+XswHwYDVR0jBBgwFoAU
FC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzAB
hhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5p
LmxlbmNyLm9yZy8wIQYDVR0RBBowGIIIb3h5bC5uZXSCDHd3dy5veHlsLm5ldDAT
BgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AD8X
S0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjn3aW30AAAQDAEgwRgIh
AM8nKvwC/q3Qn/i2DuRP3iIjqX8KVxg5Dxbm+gAixa1rAiEA90UrKsu7fDRsY66q
vaUgsP+hq5YpaRR6LXWgKyP9gK8AdgCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3
iviabfUX2AAAAY592lubAAAEAwBHMEUCIQCe3ZFFeKjRTguCQjqqOCW1Tk4bme20
546wDQYJeS8hnAIgCsref5j1SvRodW+nLNqgYaadDtRod1luElSRWRA+rJcwDQYJ
KoZIhvcNAQELBQADggEBABTu8MJQ+sSi7O6Hb43i1U1og6DzqLfqlgGj4zk+Uevr
3X+wt91l6IC+o9tLESeZaaTqimRNBHOua3oc/tgr3aSQ9zcSYhuwXnBJoGNK2DuL
q7Jc9tcBXotW0IXJBbkcGDsHqwiXylS7DK4TMc5rPyr0EYtkxj/zp2xDFsMBsTjK
L7Yg/eITMyHVHHxkxIRVAm9gLEblat8dc4zVAwUoF4eqMYs3A9HBGhso1mfUKfxr
/r9pxCFbQ1X5+bUzvbI6qVwG9mcUkAh5VRwXLjkzPDrRVZFMq7bEbwI0aWCXJYhu
l/Wu/AQFdGTCpDQ4fx1yCUi3FtPof+y7lx/xbnr0Ym4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340148284782427904043663865474965143279470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-27 02:00:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 02:00:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oxyl.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732141446092976178473155897660153968138111627521157528525389937767282135356865592562661044695334516074408278915222003389254234203261365153673641233221794233221253242900277367485430660840115120553510833456317592202801308708482501626497374795261667088180869623489514252285676802681147957509536335399091545507741096950378967450477318314381723867803778816614206808679531191543548427432521227487010170615762247896559497480632515186273438631586804262210593509124660421682384414872703414006542858002150574733037818599918708518094137144298136873118881960903981208655644305362379754416801908300520196093264123220796936485049592367228657864930008409086947132720712900515995906259659088728915158738572373030672841190130717325776609622558496940248649764984704592992594818832496668801041755400975268102119262455227073189773192977738843048078687256914363759078674581938398853005097704556799009739987912212514353692152161180184953298430577309739235272752543583508803657271288119822786449977001816099986983170473747840484107376227291216951699619352350151595083189956250441448246290741840388756131667376080197461230983647516846693614159220581357364811873198166978891351679510601110835160036106801484075193338901409104245804915706542259441453056354213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da7bc587b66d542c95d7bf0f54f993b641e9f97b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oxyl.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxyl.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e7dda5b7d0000040300483046022100cf272afc02feadd09ff8b60ee44fde2223a97f0a5718390f16e6fa0022c5ad6b022100f7452b2acbbb7c346c63aeaabda520b0ffa1ab962969147a2d75a02b23fd80af007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e7dda5b9b00000403004730450221009edd914578a8d14e0b82423aaa3825b54e4e1b99edb4e78eb00d0609792f219c02200acade7f98f54af468756fa72cdaa061a69d0ed46877596e12549159103eac97
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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