oilcityironworks.store

Issued by R3

About this certificate

This digital certificate with serial number 04:5b:f8:d6:48:32:f3:03:87:ec:dd:fd:1d:6e:7f:ba:69:1d was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=oilcityironworks.store

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:5b:f8:d6:48:32:f3:03:87:ec:dd:fd:1d:6e:7f:ba:69:1d
Serial Number (int): 379745600275698881065941772825661944785181
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 53:2c:2a:94:cb:3e:ac:30:3c:f5:9f:61:9e:c7:0b:6d:1a:75:c8:64
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 90:7e:3c:31:42:3f:a7:cd:de:55:16:17:73:b5:63:62:f6:da:3e:f0
Fingerprint (sha256): 5e:81:15:20:c8:ce:9a:c5:e3:4d:1d:bd:6f:79:c5:29:47:ce:18:f9:d2:97:54:17:78:55:c9:46:06:a7:99:a8

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oilcityironworks.store

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oilcityironworks.store

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arbitragemovie.com
balhomeandcommercialcontracting.com
bestwhistlerrental.com
biolozi.com
e-j.in
fishpaleo.com
forex4vip.com
gpsintegration.com
officialpartnerofrxsugar.com
oilcityironworks.store
proadsubmitter.com
prorvrepair.com
skinc-hair.com
socialhearted.com
topstocktobuynow.com
wvtravel.com

Other certificates including the domain name oilcityironworks.store

(limited to 100 certificates)

Certificate

The complete raw certificate details for oilcityironworks.store in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z+suO6XkETqyixkfaRG
ACjgGVmh73o7bxB/hAk3rKmldnA55CvVxoSelSYFRAglEZUKfUq840u9+wuPOLfp
w5dNBkS1/g5v5OkRY+s9RKHB8QcVz3/TYLIrRQ2JuizkHJEA33SreE010ZtXxY+u
TgkPf6+mIL9UiBS3qqGggcTAUdoKDoyUa7D1O9DoTxY7CIKMBxFOcxsrRkeOUUJ+
wDKRPzQw6It+ztIsEl4F+wm/VrvNKNmU+AufGOR73hGqDGnvFq1BeZ3hxu9Htk6o
+BdsF/DSkce0NEXhyLQY9So76bcEudJajbIrMFNTpWj1km9m95Eh27OTAN3R5Npx
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 379745600275698881065941772825661944785181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-13 14:37:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-12 14:37:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oilcityironworks.store'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29192447610433389184088428135890853344916694043360394878092589058105135578828738060281308383831144367650494628744717946852547250052090734490249143622009477068135693525117790508950966194750412484767276838404825414627760749913237918727717880980190279244146777427866169365199659564718775430200626680710953407638232142510780424220142433862951924406024634815612341660891605125077833203468089014354661197628488442800415143698871428193071830028932357140796598630096556974676386345403361879416220523129656422675973527237170898266750859570420627286530464829281046882820867001878564534612065139565058787396469898611938750525843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							532c2a94cb3eac303cf59f619ec70b6d1a75c864
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitragemovie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'balhomeandcommercialcontracting.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bestwhistlerrental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biolozi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-j.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishpaleo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forex4vip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpsintegration.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'officialpartnerofrxsugar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oilcityironworks.store'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proadsubmitter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prorvrepair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skinc-hair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialhearted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topstocktobuynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wvtravel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d037905700000040300463044022072f25811210aca7be4c93ddddb4e0f9dc0c259eaaa9b3f5a869f05747037d2cb02200f637a4fa1ad0672ffe712d0bbffcd8c02a90a8eb428fdf35a86014c0544bbb100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d037905a9000004030048304602210094227f7acc673d4f88c40ffadf490b76976870cdeef4ce7074b126b12af1b24e022100857ce0330fd9eb16e60727f30c95a339d54d2031220e3627de9cadd1fdad6f22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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