otmanager.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:21:05:37:fc:ec:48:3b:98:39:5b:eb:87:da:9b:b8:63:c7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=otmanager.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:21:05:37:fc:ec:48:3b:98:39:5b:eb:87:da:9b:b8:63:c7Serial Number (int): 272573112749865274668822766725736515003335
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ce:94:1b:22:3e:c7:65:63:0f:5d:38:8b:93:9a:46:ee:bb:12:14:ba
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): c7:7f:b3:3e:8e:92:8b:c1:71:6c:f1:96:d5:d2:15:23:93:66:06:66
Fingerprint (sha256): 6a:93:6b:f8:a5:01:16:c9:55:48:06:e3:d7:2c:ff:44:74:90:b0:96:27:de:3e:5c:fc:44:d4:7a:f3:d0:6f:5f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate otmanager.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for otmanager.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
otmanager.com
Other certificates including the domain name otmanager.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for otmanager.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISAyEFN/zsSDuYOVvrh9qbuGPHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjgyMjEwMzBaFw0x OTEyMjcyMjEwMzBaMBgxFjAUBgNVBAMTDW90bWFuYWdlci5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCkCUWl+4M8xWYKbnHzL6A/K2VBmww7hgrX truPh1O5rlmf6KZ2Zpby5SshNQHWyXICWVWej2Ab6lphpeGgBgyOB56ZUqiZQ5oA PiwWKg5y7BvMIi7YGyIGcejTEnpXzAfUatTdow/wtvqvQyf9RyeWKSLHSnjuPNmr 1ipVCoh9ZdA/i29wwvjGylrEs0fROJ1gQNqy0WzUW30edq6N1XUBGIF7vrld8K8I wM0x45sGIw1yMwIa3+eh5K6JIjoYkkN0UFAVdgWzbpidpG9gBMrdJtZZK7Hkmc2a xJPkzxPjjIoMa3EIkg+cA9EUMss1aW58iqdTSuX02+EMwUbO5XbUBhFFS+qmqRc2 GrZ4KqDL+1/NRrXuODVCPay0GBIivht7n3znBRGd4ayNUpMAi+8DAXVv1HRYJ9sq VN8IO+OjPO5f4DcBV7sHniM/oSzU/CbtnLgD0OwaqUscPm6U+MVC2nzxVLdemovp y9mAjcvOHJ2RdAgK+lknYkvWfYAjgoRGkSJUbkiKhvaPY0KpUeRplKyNNXWApy05 DMPP36bmgOu6xl72dnQ+WdnkFDy9QTC9t9iZP6LvmeVhe6jbS/oYhC1DTwtijRh7 OfzBo3ETxqMKTnE6Uozy7gL6ZQ3yqCNF2JCXqJfRd5clOLow/rijnbUIt+QRHlUn 6cOY5X8NXwIDAQABo4ICYDCCAlwwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTOlBsi PsdlYw9dOIuTmkbuuxIUujAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW90bWFuYWdlci5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQCBIHzBIHw AO4AdQBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAW16I9FpAAAE AwBGMEQCIGmCFyBEHU5lF/1vppN/b5Mcq4yXh3RQi6yaRB0QkSyYAiAWyDqFUYdY FP540knvGiQ5x/HcVBcolkNtQ9OMT33z5wB1AHR+2oMxrTMQkSGcziVPQnDCv/1e QiAIxjc1eeYQe8xWAAABbXoj024AAAQDAEYwRAIgcFFm+GS+j4LFttY5bug8mRY8 1ZFfLKPlbFC4TN97WdACIHLWPxPsXBuO1mmuCBtNwbQQyffj9QDEOhbQjO38Bbhy MA0GCSqGSIb3DQEBCwUAA4IBAQBLsxhertoSPwrygmFBLwDPXm/Lo7bgqCXYjeMd J97h3zSSira9FDb4LYKS/GgtxpJQAorHR91acG3fiLfkRINDy44WBdc03pXPT+kn 82ZMGBSDKpo3Dg17/SCfjAP3TTK45LoEst17ynDXGRMp0nB81IlRkxV95wSeJ2x9 ZfOc14criZok8hQoNZAHJ16r+2yQHOQuUkYfjCMaOs9jCDv+gI/PQvaHu6pRxIMf 1ZlhTNmENJZ70Y8vCz9cG71tL/4aEYEoBVgCfJMFILWcLUQdfYLWoACznO0p+uCG bhMxjI2lpX7ZFmMEL4vKXOPN+fcQhMakiMraYviGR3Jm7z3H -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApAlFpfuDPMVmCm5x8y+g PytlQZsMO4YK17a7j4dTua5Zn+imdmaW8uUrITUB1slyAllVno9gG+paYaXhoAYM jgeemVKomUOaAD4sFioOcuwbzCIu2BsiBnHo0xJ6V8wH1GrU3aMP8Lb6r0Mn/Ucn likix0p47jzZq9YqVQqIfWXQP4tvcML4xspaxLNH0TidYEDastFs1Ft9HnaujdV1 ARiBe765XfCvCMDNMeObBiMNcjMCGt/noeSuiSI6GJJDdFBQFXYFs26YnaRvYATK 3SbWWSux5JnNmsST5M8T44yKDGtxCJIPnAPRFDLLNWlufIqnU0rl9NvhDMFGzuV2 1AYRRUvqpqkXNhq2eCqgy/tfzUa17jg1Qj2stBgSIr4be5985wURneGsjVKTAIvv AwF1b9R0WCfbKlTfCDvjozzuX+A3AVe7B54jP6Es1Pwm7Zy4A9DsGqlLHD5ulPjF Qtp88VS3XpqL6cvZgI3LzhydkXQICvpZJ2JL1n2AI4KERpEiVG5Iiob2j2NCqVHk aZSsjTV1gKctOQzDz9+m5oDrusZe9nZ0PlnZ5BQ8vUEwvbfYmT+i75nlYXuo20v6 GIQtQ08LYo0Yezn8waNxE8ajCk5xOlKM8u4C+mUN8qgjRdiQl6iX0XeXJTi6MP64 o521CLfkER5VJ+nDmOV/DV8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272573112749865274668822766725736515003335 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 22:10:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 22:10:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otmanager.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 669209387782868457846035626420873391551337519548508176018130425274095656583329140805831069064426525582388419084396089341063994136425030054448492012659587234110451246117805118480124099437906909324618267822446699165319158587449720157252479293319005818139176277290762478159896224215917152409655819297553093425494971336710198415794044712617265525034954112568466483253150466761715759399517761010361200257748954740653135741657121859664723796545744139987275939049777942600319713641929346797968138170551864585897963219268113689198472193262645659065473358468342208649985283938186650890475767152747544722666383629753824615737623002506431504583786100004086860578355942946547274759764128527391292596576000996029655606213170804050782434878348459495190925980706400196694019028173338309204479034751245191407515448621563832006300265839118019866075362059654232277265275343568175761884358349529113338465997885840201444867014245293718600776801855163885402836952789882079487343286105093555006626063135464529433045223316137357784976325352032037700996062199948679772061746858666875301295906146110428654625712230343756381359531708824215291627021931007532903039587922688194547362645757667771353774120338817039720601764406233659311096976193625689392456600927 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ce941b223ec765630f5d388b939a46eebb1214ba . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otmanager.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7a23d1690000040300463044022069821720441d4e6517fd6fa6937f6f931cab8c978774508bac9a441d10912c98022016c83a8551875814fe78d249ef1a2439c7f1dc54172896436d43d38c4f7df3e7007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7a23d36e00000403004630440220705166f864be8f82c5b6d6396ee83c99163cd5915f2ca3e56c50b84cdf7b59d0022072d63f13ec5c1b8ed669ae081b4dc1b410c9f7e3f500c43a16d08cedfc05b872 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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