otwsg.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:11:86:b7:d8:20:a3:01:d5:45:b4:96:2e:33:38:dd:85:9e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=otwsg.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:11:86:b7:d8:20:a3:01:d5:45:b4:96:2e:33:38:dd:85:9e
Serial Number (int): 267300729158283208281068066128566113109406
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:23:8c:2f:e7:4b:b7:2c:ee:6c:40:2c:33:9f:7a:22:3e:45:e5:41
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:70:6c:7f:95:9b:4f:9c:e4:b4:ce:fc:e2:e7:ef:5f:2a:6a:06:65
Fingerprint (sha256): 5d:55:74:60:55:cc:cf:c4:cc:7e:54:5c:cc:af:56:29:c2:07:5c:1e:3f:d3:2c:1d:99:d0:e4:95:a6:70:ae:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate otwsg.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otwsg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otwsg.com
www.otwsg.com

Other certificates including the domain name otwsg.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for otwsg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267300729158283208281068066128566113109406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 20:11:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-18 20:11:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otwsg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 735070491386576848471437485107554457319082626216501257975855842071699984924658808302493244403319450243283585090920203507506462405909627795466988561721609089660434939347875878904376601802960259301359152062886491799406446139266520073825711116683405581719291742127971424441899369820234706676102337332771417307739104542157909054302265595969380507748546062299959548545295514911613915692911893790649658680745526130337508915052910303016503223479041465343274118103923095751840929413755652656348470838503212078450602727457893833210035616294285742388001268166194395287548399572253167784607800936940174004762131731995207543172051890681543335778108048523203717057012249941887410427447201273700008412592676589249246459565707856823287579624312991839712283152720474363200593321683696971257957192849320133014130426120519796843035825132968114014462930617234657543585689152316503576977421473521472611899167943825719603337618886785362490102632436052793874261604366881813352809279067986370376677165056311830147881433263941345932037027992733722176870058538837488569398875368715451131566197531494991803279121679681200825803733300906678332420989397821451243397273075056670529706687119813916762988977682488828250904539767178961873706795334515674359790573033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34238c2fe74bb72cee6c402c339f7a223e45e541
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otwsg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otwsg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b76bae602000004030048304602210086d350820420de28eb0923216726f2536100341f43846a78f557e9a8d5fe796b022100e5e07dbdbfa61cd4a4bf020fdb3bb30ef8492b53a201b1353b4d8023ce812d4600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b76bae5f800000403004630440220697fd9a0b315b4dd7672a3747279eaddcaadb5e6978457efe449b699cac34e20022010026288a217847b9697052d947d2b1bef82ce5cb634fad094854a09348dbd10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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