www.omniprinting.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b4:ea:ee:10:24:62:f9:5e:ef:00:5b:ad:c2:79:bc:ba:b2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.omniprinting.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b4:ea:ee:10:24:62:f9:5e:ef:00:5b:ad:c2:79:bc:ba:b2
Serial Number (int): 322899959286117063477257274780108243909298
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:5b:3e:2f:d2:9d:02:d9:71:df:6e:eb:db:f7:47:7e:e5:0f:c4:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 34:0e:94:c8:31:56:41:64:cb:6c:fa:80:33:ca:bd:0a:f1:a9:c7:4f
Fingerprint (sha256): 57:e7:de:1d:0e:6b:06:0f:c9:72:88:6a:12:06:6c:5e:cb:d1:ed:b5:b6:23:58:5c:48:fb:e8:54:58:cd:66:49

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.omniprinting.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.omniprinting.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.omniprinting.com

Other certificates including the domain name omniprinting.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.omniprinting.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322899959286117063477257274780108243909298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 07:13:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 07:13:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.omniprinting.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843248653833249196420479916967228891682894236223899788300813235881965704951102548735183905807760185503841061285876445563086598753785048720647554627626053210767098095024366439237011343568794288185050548117758050423548753957639528210264140862279069926768755287178873364026944057698586121497393860904383719884751103507082983691276949966554778211275272202943258622755319398184812565358177430299053856823292900377303096676003641350337431514527377593704275471272233095022970929844126075789701405583800249695406334816840854601697406834875845175334107643763050423730333289346048581042198000407850544530011035522382355398256559636932157274017941592916694335331122902414110207563650223862770206108902268474671494644878383833708266040187957544172077078147438735599907428594515245256829943467392687542865247228063012460128000779297001523030959328173428741074206372358967434656538658784992489203864040750207050319124042509410983976874829565475989440682627539197213556551805581428723482029314558863554145387411621489106673953922703282657157243202902966305914830119561941102426168643345836032291576115022290006637751744185742255170164054998356587213274783045851322152494159722259333848651206424376574955052591817989243381420166926999513252617497591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e15b3e2fd29d02d971df6eebdbf7477ee50fc4b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omniprinting.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001705235cc3100000403004730450220703092b6c04c169c1cb4322a888b35e01ec80c7f08ead20a75fa2115de3ae58a022100afba2977017a1b6b0b5d93de8178dd0f1e5753029d52fb13e6e3d82f9bfbbaec00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001705235cc9300000403004730450220578ee715bc94ba9cffcd6d836ccf08d598846656190b9ebfac29494d88caa7d5022100fe8fa6514acb1e2b9bf2125e1dd572d089f5b0683e08dd69a82fca5ac1ba4a39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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