*.cn.omega.best

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:a5:50:46:41:44:f3:41:a2:f6:21:6d:1c:2d:c5:d9:00:14 was issued on by Let's Encrypt.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cn.omega.best

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a5:50:46:41:44:f3:41:a2:f6:21:6d:1c:2d:c5:d9:00:14
Serial Number (int): 404702437293258147261175802130840382144532
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 82:bb:cd:b2:5c:07:24:95:3f:76:4c:d2:f6:73:92:a4:e1:34:45:b5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:c9:bd:74:95:dd:8c:2b:c9:3b:19:dd:33:81:b7:30:34:46:6b:24
Fingerprint (sha256): 75:b3:01:ec:2b:6c:61:df:82:4f:61:25:cb:43:3b:59:1e:bb:f8:e2:f0:c7:70:46:48:0c:f3:35:bd:ba:1e:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate *.cn.omega.best

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cn.omega.best

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cn.omega.best
*.omega.best
omega.best

Other certificates including the domain name omega.best

(limited to 100 certificates)
*.kr.omega.best
app.quizip.net
bekbakes.com.au
twenty2apps.com
www.min.rest
backoffice.omega.best
*.de.omega.best
*.jp.omega.best
gateway.omega.best
transfers.omega.best
*.cn.omega.best
www.myecosense.me
*.omega.best
morningluck.com
developer.doc.foxar.fr
area.omega.best
sni.cloudflaressl.com
cdn.omega.best
krishnapraneeth.in
*.omega.best
www.comokitchens.uk
area.omega.best
blog.omega.best
*.en.omega.best
tonyloveshan.com
directionsplease.gaminatechnology.com
gateway.omega.best
omega.best
onboarding.omega.best
fda.console.bringo.me
www.bradshawandson.net
marcelodebortoli.com
*.de.omega.best
sni.cloudflaressl.com
*.en.omega.best
*.jp.omega.best
www.emiri-okazaki.com
ikagadeshitaka.tk
*.omega.best
blog.omega.best
*.omega.best
www.omega.best
api.omega.best
*.omega.best
www.wassassin.co.uk
docs.puzzlemazing.online
annasandbergmusic.com
sni.cloudflaressl.com
www.sdsolution.rs
alianzacim.com
auth.omega.best
dev.dbag.army
*.jp.omega.best
cdn.omega.best
shardings.com
*.cn.omega.best
fkske.com
linaveo.dev
swoof.me
matthiasclee.com
www.hotpot9.us
api.omega.best
*.omega.best
*.omega.best
*.omega.best
*.cn.omega.best
tudutu.app
nanaopoku.com
docs.remotivelabs.com
link-producer.xtrea.mr
funding-support.elder.org
url.sitc.de
blog.omega.best
*.omega.best
transfers.omega.best
auth.omega.best
gateway.omega.best
auth.omega.best
*.omega.best
www.playtripeaks-online.com
vibe.irex.org
auth.omega.best
www.omega.best
cdn.omega.best
byme.app
changers.chgrs.link
canguroo.pt
*.omega.best
sni.cloudflaressl.com
thriftit.app
www.aseanglass41.com
developer.doc.foxar.fr
auth.omega.best
sni.cloudflaressl.com
samesex.app
limitedoffer365.day
www.erikmonjas.com
gateway.omega.best
*.omega.best
api.omega.best

Certificate

The complete raw certificate details for *.cn.omega.best in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryZRJTqzeS8Op3bg8ICN
78EfogBxsvsQK6zcDoo4oLiwNTKg+/g3dEsTeC+A2QmR2JXfyk/tMNCYdWbxwIwA
hVIpBhwVoQa175DxWCRoWoldSsehfY3yipUMzB2cNxTokvnk+C5thc39kIxnhYdi
iidFe8xnAr/iMCi195E4LV23BMDF2QXeu8C/xYEKlmKxv7fj6W55rmU2hq1F4xtL
XKNILmYmMClygrVkW/YifIpbq4v9VThDtLFUBss+G8XKHbRz1rkVpeOhIeW+Pc5q
sbuRyMSnTfVIbV/rdJCadMraVZFKC+zwZ7H7PLMvmJOfd8+0bzdRurEbtcprBEQI
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 404702437293258147261175802130840382144532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-12 12:32:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-10 12:32:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cn.omega.best'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22110598173318447432799514055373138250190360347023202193297235246158841691948475967674893482349688759714384839557129794024240295710292014088471322305610635627099448740081784350074470464207617948426726713372508936200703885577234184789434578007271106241988379925802462753370537647685342193662868962669578323120929794373636585115956474422170303985692360323642388028001747197284602842823058248875153246916899323762182787276940871786941806223441374004518845419587155296194804038095583655996414969741467748590647000602071885411620566781607735971068304806045686459526940415663285726827253217475456220928395858909683127683281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82bbcdb25c0724953f764cd2f67392a4e13445b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cn.omega.best'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.omega.best'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omega.best'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000166687a62e60000040300483046022100921f92876dd73e0a742ca5785caf8c25590e22ba62da7754adde1bc508b17900022100b50d6f4b1c5e1682b20a1f5d900b4a609b027c071f95abd922a24d4595705179007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166687a62d3000004030046304402201c2843b054c1907541114c5f08b42b8366b1fa35089662c952f8369a386c86da02201eb929a23078398bbc1fdfa9f05d3e9c74fd60bce2009260366677f84f0e4924
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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