odoo.otsokop.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:98:b1:e8:17:af:ba:ed:b7:26:a5:96:b9:ab:e9:79:48 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=odoo.otsokop.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:98:b1:e8:17:af:ba:ed:b7:26:a5:96:b9:ab:e9:79:48
Serial Number (int): 276852530706021900317411381644771140925768
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:4c:59:1d:d5:03:0b:62:d6:65:e9:28:10:59:b7:ba:f5:40:1f:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f9:3f:65:ed:79:c7:fe:6d:00:3b:c6:ba:99:1a:02:e1:d8:c4:b5:3b
Fingerprint (sha256): 5f:a7:78:3d:4d:0f:ac:f3:80:d0:63:74:1c:58:5c:82:18:b1:c9:32:8a:a8:ed:79:fb:50:fa:ed:d3:f3:db:08

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate odoo.otsokop.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for odoo.otsokop.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

odoo.otsokop.org

Other certificates including the domain name otsokop.org

(limited to 100 certificates)
odoo.otsokop.org
otsokop.org
otsokop.org
otsokop.org
odoo.otsokop.org
drive.otsokop.org
odoo.otsokop.org
odoo.otsokop.org
otsokop.org
otsokop.org
otsokop.org
otsokop.org
odoo.otsokop.org
otsokop.org
otsokop.org
otsokop.org
odoo.otsokop.org
otsokop.org
odoo.otsokop.org
otsokop.org
odoo.otsokop.org
odoo.otsokop.org
odoo.otsokop.org
otsokop.org
www.otsokop.org
otsokop.org
odoo.otsokop.org
odoo.otsokop.org
odoo.otsokop.org
otsokop.org
odoo.otsokop.org
otsokop.org
otsokop.org
otsokop.org
otsokop.org
otsokop.org
otsokop.org
odoo.otsokop.org
odoo.otsokop.org
otsokop.org
otsokop.org
odoo.otsokop.org
odoo.otsokop.org
odoo.otsokop.org
otsokop.org
otsokop.org
odoo.otsokop.org
odoo.otsokop.org

Certificate

The complete raw certificate details for odoo.otsokop.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276852530706021900317411381644771140925768
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-16 06:06:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-14 06:06:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'odoo.otsokop.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 776217760226066707880976266885363851598314601533148995965180062298685494336411419727192799643311874888026727778808620857416403549047875821719870202225567399947873457518831075715542242030466189352452268249303159662956388846091013990488259082916304753673930106318168983596830318259504100138181831865868301413912366246839739702367111855433220377729642108796789180388778744355210479174691710397506674440036737380087313372471270375971150736661781040236662367438268539979486636875010500381140470597843498663457313058193812496239147011787753652276025156424756076756237219644269281427116022620065715121266990376604726181265510478956314231333675166369024122957258686857697815355646838195085271617621840700807818965402678540121198697108592970451536226013499742297394599022067263311226141007056955381436135879061334079535760488897348158730337472812319992893990655334754116917477252359502290152644317752620093162459787847678187734851487014468667520518934031734045485803056793300087585821529824051997871909306485629389014248349580328357575101689053525807944564339758165606280592610931091128105997232273311914211938315684159355951292590924092686850030059060626755947272375161787452203242196432737640634383019461217790183265171135468291791862269413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ae4c591dd5030b62d665e9281059b7baf5401f7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'odoo.otsokop.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001698552a1e6000004030046304402205b2e18466bf0949edfaf50228274f06aa0ce2626ffbc01a5bb26fcf67a6549800220530e83db0fe416a784f8460ad5e13fed1daa6b826b9801518af9c76cff825467007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001698552a1eb0000040300483046022100d4f8019685f8e7929f9a5b16bb0e4466f5e53e47d4e1d97bcadd1558d5af9618022100d151f918bd32ee476f750bec1de55777690ce4f614beea7d7f358443a456760a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0061c085b93bb90d49ca6e9f86064ab0aa716dd5a50bbc4f4ed763cbaad5fd19cc4d0f88aaf38f721d74a38d577607f9c37f1f1516bd60923c5f1d6e62dac02a0b9e3883d559ad2ec1fd2381d074f473d81476778e31ea6fde2da26b19a456129bdb009b90dae6b3ddd7b6f225522ff27227c2359b7cf67280007ae789ab10ad5d7a96ea6f96acc19b92909e8d8ab9900e346b05f93159faf6bad611c1838f36cd079811c393e730d6fa24815cc83c93d9355dd8ebd059d69c0026502ea64cd1fc17afdf2cac0ffbd8f3172d5fc47bcc7a5bf0652283248080858ee7edd7da99fcdf90d9d823284dfc068a9b10bfd6e7b1f031152c32ad4c35fbbe988e1c095481