www.osanna.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:95:d7:ac:9a:ba:c3:2d:e7:6d:63:e4:30:e3:d2:d1:b0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.osanna.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:95:d7:ac:9a:ba:c3:2d:e7:6d:63:e4:30:e3:d2:d1:b0
Serial Number (int): 294883704569562635836706399293241092657584
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 08:bb:e9:e9:6c:45:6c:f0:f8:aa:a2:f4:03:04:ae:0a:d9:7d:f2:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:cc:f1:ab:dd:c9:49:9e:70:62:a0:b2:3b:3d:59:0b:4a:5d:31:b7
Fingerprint (sha256): 68:8f:74:8a:43:e3:29:c8:bb:bf:aa:b7:78:c7:5d:6d:9f:cd:c0:9c:7e:1f:76:7e:fd:e9:8b:4b:13:0b:9f:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.osanna.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.osanna.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.osanna.co

Other certificates including the domain name osanna.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.osanna.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgISA2KV16yausMt521j5DDj0tGwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzA0MThaFw0x
OTA4MjYxNzA0MThaMBgxFjAUBgNVBAMTDXd3dy5vc2FubmEuY28wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCzigBuFA9a5VW7JUhsM8kgKUwYYedNSGFC
9wbcME7+SUJBu265V3tpnZiMuzX4qiBTgoYWQkKYCEE+OPZVU+l1apHYbZunAHNi
2JyrJLhnvxfBTmaS/BT2ff040fLgRGDPfewCjnFsynBwUg9abgQ6NE0UorhpMoYy
e2ssDXvJqxGviZUVP4JTIs/N8UbMIFC+I8spqTvirKHfo6HDRnU98yiqD8shqu7t
F6uE2koP7u+8kHtZsC+PIEluoOCpORKbLxMxrcEc9HhSD0kNrtt6PNu2g4SEboL7
Wk7ggUN2WVrhWSpyF89fX2USCdcLOF+uN25KCgE28D/FrU38Oy27eRDDwY5rR1ER
TDm5fLET7T0zuAj0kS4R1bw4EW6x9EU/O+uU34fS2PQKbAOL7ys4c1aRtLc6Lg/z
RHkUV6oUd2jx5GYUBtedoXnZjbPuy/DOaNIrksfI77KlBorEmCVo+VZoZR+V26m4
3zB7oVEOfiibMhpMfoO5Di9ODIAEklFBlAXRT08/k/rGkfii1Ep/nhP66NHRAXHJ
qxRDvMF2bt92McaBVhW5PahE+KeQbztqQxcQYkYQ4fI8Z34IPWR6w8lcMv0Q0EeV
yanx/Lr4UDi334yMfZho1z/1RUzfdjdWYksXDB7fOjJ1fs2MZGEaPbcL1NqY/0rd
vMHeEFxCDwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQIu+np
bEVs8PiqovQDBK4K2X3yfDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5vc2FubmEuY28wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWr/nUpjAAAE
AwBHMEUCIQDjdaXcdtE2TF7B0M+1xxFlS2rJCP432jlEWlOCm3HFigIgLpm80/01
keRdPlJzcpQg0XhOjn+AUwivlBIhWBqMEJkAdQApPFGWVMg5ZbqqUPxYB9S3b79Y
eily3KTDDPTlRUf0eAAAAWr/nUqAAAAEAwBGMEQCIEpE5OkGWMM9veK6QehwlDH3
NlpunqkFALS1GpdunRSUAiBhE4yT47xmkYhiUdVMNPd6WfbHVIjTBRrZy7ggN2IT
3DANBgkqhkiG9w0BAQsFAAOCAQEAbytp4DAdCO3A6p4JLPZzlGkYeB234pbmM0ad
tf+Fsj2tMNFSQewM22LfxdukBVafsnCYDDceqyLgVBLfSVRwdcZ4WDZkwkkRC8n1
1Omzx9Il0hlejC/Wh0nhNxBEAlKVtHkUaFh3usjV1Ddvo/c2XjR1ZCKjYwns7pLu
s7gXm69JdJ3A5g6p3PL1EJFEfU72G8bgZcfXdYcj2lLWv/bKnNVikdxDi4SykeBv
CIf4tWowwlfY8Z9hlfLAIId/omRTb5l77gjdJoS/O9HbT8ZFRixFjIPBiWnmOqpd
G9GSl5YusexlFZ9JFvI3IGHzRO7UNeNonYym2EsvJsoFRJ3TGQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294883704569562635836706399293241092657584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:04:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:04:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.osanna.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 732455498073305029000218110128219419527570059909075116227202733941313699351023899396526466224605892733050508849257324410308461275642515717047240185090618275923524794646319606534520993446650161187050673693756683104858671138188311332656800394816170410424891383356044582468185746857114245302329931211689844613977149458509533459104828242782308226588222454229345067794826099809696426916620429357628294706099007388035198217054242574289282043970730102983587644284121245631956152520498655879774835123670910567327935338323322136444964746102910350522293601544195645350791399038896653859236827039112636977696463052451531948681974833092861079705705623512448758397248116465808039017527596503552642851519215919445592775337719298441981104290217899045877302101600098529694069015593885392111023124529560835876136188921938489298378929811121562089978491002982057725950366874969763918615480157564238226269055230584080101238742339881091751124836638189727524705259528080046397022442618363376960165923275806171459735819712016046459574632035475341137341428197176979145259923211983749405344890610692336326634667428866950678895426451715925471269709230080042043508276134264280825268447270429881487533066641772315045424334792285716666284244544494397203010044431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08bbe9e96c456cf0f8aaa2f40304ae0ad97df27c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osanna.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aff9d4a630000040300473045022100e375a5dc76d1364c5ec1d0cfb5c711654b6ac908fe37da39445a53829b71c58a02202e99bcd3fd3591e45d3e5273729420d1784e8e7f805308af941221581a8c1099007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aff9d4a80000004030046304402204a44e4e90658c33dbde2ba41e8709431f7365a6e9ea90500b4b51a976e9d1494022061138c93e3bc6691886251d54c34f77a59f6c75488d3051ad9cbb820376213dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006f2b69e0301d08edc0ea9e092cf673946918781db7e296e633469db5ff85b23dad30d15241ec0cdb62dfc5dba405569fb270980c371eab22e05412df49547075c678583664c249110bc9f5d4e9b3c7d225d2195e8c2fd68749e1371044025295b47914685877bac8d5d4376fa3f7365e34756422a36309ecee92eeb3b8179baf49749dc0e60ea9dcf2f51091447d4ef61bc6e065c7d7758723da52d6bff6ca9cd56291dc438b84b291e06f0887f8b56a30c257d8f19f6195f2c020877fa264536f997bee08dd2684bf3bd1db4fc645462c458c83c18969e63aaa5d1bd19297962eb1ec65159f4916f2372061f344eed435e3689d8ca6d84b2f26ca05449dd319