indiaott.com
Issued by R3
About this certificate
This digital certificate with serial number 03:c5:c3:70:0f:f0:df:73:3e:19:9b:f9:b5:ba:c7:a3:86:85 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=indiaott.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:c5:c3:70:0f:f0:df:73:3e:19:9b:f9:b5:ba:c7:a3:86:85Serial Number (int): 328632265398451889273184176732259538404997
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 4c:04:cc:e1:1b:7b:7d:05:10:2a:2b:53:e4:03:0c:e2:f4:1c:83:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 6a:32:b6:a0:85:e9:44:ce:29:72:c3:92:a8:ca:2a:ce:8c:31:24:51
Fingerprint (sha256): 76:d1:66:b2:90:12:00:49:03:87:cc:2d:8e:9a:8e:89:87:01:4c:77:65:48:ee:f7:5f:a3:02:9f:06:b4:4c:1b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate indiaott.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for indiaott.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
indiaott.com
www.indiaott.com
www.indiaott.com
Other certificates including the domain name indiaott.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for indiaott.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgISA8XDcA/w33M+GZv5tbrHo4aFMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAzMzAyMTE0MzdaFw0yNDA2MjgyMTE0MzZaMBcxFTATBgNVBAMT DGluZGlhb3R0LmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMzX 28Gil9S8T3/B8pb42SNqA+xk8+8uc0C5cUiAIDEg8vKHeU7P+BS1XDzDzd55k4j3 df+c81SyirtXk9Cl3ldyhtVj11lQLXY/ZeZDd2qmjbM/jIk4ClBPDHmGf1Jlnitl VCZXJzNQjPd4NELrXMrduTzEvkxajD8PPa/cGcedUBqCeGJShz853F7jEY4r3Ihz M/UP2yGY718bCr3cT6HbdXLTALrN0iYxut+I04AJ93PARqiH1ni/im/m/x7z9c7N RHMsfIi8gptzGmJusgYx9ZNAXGmde2nrj2NKS3TohojAJCvSD4kYUN0561v95wdR YkYxLtKE1182AmTcgI98kKUkWtP+6oL7KZs39K30/TECT3gLaPhEvP16lkMhQOFP wAOzChmzyAtWdg7eMJWzDrOR/SSpJmZtu9bY96VMTg11dJL4caMF6hloMDtp+od/ BzdbQP9O46uF90HdVeS9N7OXckiC3sqUv4z/1EgIbC/7Wa/gCkOS0tWqqQe2WSq3 fNrD4afgnXw3LCPA7AupIQG9rxvQZ86WrVA5F6LmSwhq/T3kXTaLpFe/ZZu/IFP9 1OiuwVYBENcmNMtmJ4k6lFVsYCcaTXOk/vO1Q3MPtP6M6uAyqSiOPq3zX2oTInGJ mstArLe8xfBgkyrroLMz/Cz1CjA2nTqvn8+iiJW1AgMBAAGjggIiMIICHjAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1Ud EwEB/wQCMAAwHQYDVR0OBBYEFEwEzOEbe30FECorU+QDDOL0HIMzMB8GA1UdIwQY MBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEF BQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8v cjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCDGluZGlhb3R0LmNvbYIQd3d3Lmlu ZGlhb3R0LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQYGCisGAQQB1nkCBAIE gfcEgfQA8gB3AD8XS0/XIkdYlB1lHIS+DRLtkDd/H4Vq68G/KIXs+GRuAAABjpFt 01cAAAQDAEgwRgIhAMq1JGHEQC2On3HasiZV0ReSzgUM5RUBOzQBQGgvNzs4AiEA 2wKWHGiS2auNAeyoOb+IrV9j3es27xgEE/EjVCJSfKEAdwCi4r/WHt4vLweg1k5t N6fcZUOwxrUuotq3iviabfUX2AAAAY6RbdNgAAAEAwBIMEYCIQDWsQ3lFODzdbwv fnbYs7hMuDBILqwTefH9NdjeCSE9WAIhAPTyYLh/VgNKkcGr5tW/4+fjiX+keGf+ 1kevzi6cT+eRMA0GCSqGSIb3DQEBCwUAA4IBAQBLvJwEq9qmnuFQx64li19zR8MB RdXmuNu3B8K86R1A7TJdc6wOyt37M9l0StTOoMW9EIiMNnAGZ2OpEvKDWfridkhV IeWtS23yNvtA12kwsDSQWX82A7QgAtby+xQ8+11iPnTgXnOQ+txfjyUy4NHs5Za5 jgzY7lrOp+OtoC7cj1gUy0FvCrspmy7dbIDmWKclzEmqPPkJ4VMLrJjLZ+SsGD2q /SdEBaVXaMZC1EOAIddA/qhSWcAvw9mIR0+TozvXmdAWcgJ2jZd9k57YALam4BO1 y94XcMbeF3yi/d1uOVHrcbAIza4j9gI0Dar/vGHHs8BIN5ZPK02DpekpMOqs -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzNfbwaKX1LxPf8HylvjZ I2oD7GTz7y5zQLlxSIAgMSDy8od5Ts/4FLVcPMPN3nmTiPd1/5zzVLKKu1eT0KXe V3KG1WPXWVAtdj9l5kN3aqaNsz+MiTgKUE8MeYZ/UmWeK2VUJlcnM1CM93g0Qutc yt25PMS+TFqMPw89r9wZx51QGoJ4YlKHPzncXuMRjivciHMz9Q/bIZjvXxsKvdxP odt1ctMAus3SJjG634jTgAn3c8BGqIfWeL+Kb+b/HvP1zs1Ecyx8iLyCm3MaYm6y BjH1k0BcaZ17aeuPY0pLdOiGiMAkK9IPiRhQ3TnrW/3nB1FiRjEu0oTXXzYCZNyA j3yQpSRa0/7qgvspmzf0rfT9MQJPeAto+ES8/XqWQyFA4U/AA7MKGbPIC1Z2Dt4w lbMOs5H9JKkmZm271tj3pUxODXV0kvhxowXqGWgwO2n6h38HN1tA/07jq4X3Qd1V 5L03s5dySILeypS/jP/USAhsL/tZr+AKQ5LS1aqpB7ZZKrd82sPhp+CdfDcsI8Ds C6khAb2vG9BnzpatUDkXouZLCGr9PeRdNoukV79lm78gU/3U6K7BVgEQ1yY0y2Yn iTqUVWxgJxpNc6T+87VDcw+0/ozq4DKpKI4+rfNfahMicYmay0Cst7zF8GCTKuug szP8LPUKMDadOq+fz6KIlbUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 328632265398451889273184176732259538404997 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 21:14:37 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-28 21:14:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'indiaott.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835687333378079999396010341014594556821739602515374945474871039011789170859795208065290691797200982171210702700744429771931385992052897773522198413481155759049460975283454720481715255612922012220203567436329589924257473626921488074508531234094205398243512464856782030794879082941096871055865864942666314533369915246553106952196258500048374192395507376302640246307933088754705804426350170554104663764774161523162981387498108915307793113011246496574174216042726394726083062600846898366938445498073999957572645374726225090263723645238229271838359973635349074413283942015194305827067313656049301667015508223581530874942849188850722643386784566655951837394016972922510694973696212142282517300777330224149859701532717917918765728310310752490993307670426797403595886047409597505761832058359266578969056532343027106199652491159940899482783401890893983080533092415750430655370378535710083952923979027136353279416726237911145878341123272023014634848841743837348336670623600858188661528850559494340996800088060082407644569010806048885929578051717777407503942644191055204663451581720187468377031362139775917686704999075724642821055881462303196167683242769190127439877118683707840770693143636686532758964252779464549477145203488353484403932435893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4c04cce11b7b7d05102a2b53e4030ce2f41c8333 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiaott.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indiaott.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018e916dd3570000040300483046022100cab52461c4402d8e9f71dab22655d11792ce050ce515013b340140682f373b38022100db02961c6892d9ab8d01eca839bf88ad5f63ddeb36ef180413f1235422527ca1007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e916dd3600000040300483046022100d6b10de514e0f375bc2f7e76d8b3b84cb830482eac1379f1fd35d8de09213d58022100f4f260b87f56034a91c1abe6d5bfe3e7e3897fa47867fed647afce2e9c4fe791 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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