ocom.edu

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:f7:ad:11:88:a7:37:ba:64:c7:bf:af:11:4f:69:b5:5e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ocom.edu

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:f7:ad:11:88:a7:37:ba:64:c7:bf:af:11:4f:69:b5:5e
Serial Number (int): 319854360476704362669693556685639393064286
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a3:04:42:dc:11:55:5e:4a:94:ae:cb:8c:07:33:49:df:3f:00:7d:24
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 75:92:bf:a8:53:1a:2d:7b:2b:59:2b:6c:2d:73:0c:17:d8:1e:e0:da
Fingerprint (sha256): 79:60:eb:e3:da:68:c5:7e:1e:c6:b8:8c:05:85:57:c5:6e:10:dd:c6:46:84:58:ef:a7:b9:6f:e1:7e:44:81:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ocom.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocom.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocom.edu
www.ocom.edu

Other certificates including the domain name ocom.edu

(limited to 100 certificates)
2016.ocom.edu
ocom.edu
ocom.edu
*.ocom.edu
extranet.ocom.edu
library.ocom.edu
ocom.edu
extranet.ocom.edu
library.ocom.edu
extranet.ocom.edu
ocom.edu
wp.ocom.edu
daom.ocom.edu
library.ocom.edu
wp.ocom.edu
daom2017.ocom.edu
test.ocom.edu
alumni.ocom.edu
policies.ocom.edu
policies.ocom.edu
ocom.edu
library.ocom.edu
wp.ocom.edu
library.ocom.edu
ocom.edu
ocom.edu
alumni.ocom.edu
extranet.ocom.edu
library.ocom.edu
extranet.ocom.edu
ocom.edu
test.ocom.edu
test.ocom.edu
extranet.ocom.edu
wp.ocom.edu
dacm-comp.ocom.edu
policies.ocom.edu
ocom.edu
library.ocom.edu
www.ocom.edu
policies.ocom.edu
wp.ocom.edu
*.ocom.edu
extranet.ocom.edu
library.ocom.edu
test.ocom.edu
ocom.edu
www.ocom.edu
policies.ocom.edu
ocom.edu
ocom.edu
ocom.edu
library.ocom.edu
odc.ocom.edu
ocom.edu
test.ocom.edu
ocom.edu
ocom.edu
ocom.edu
ocom.edu
moodle.ocom.edu
test.ocom.edu
acuresearch.ocom.edu
ocom.edu
test.ocom.edu
gateway.ocom.edu
policies.ocom.edu
ocom.edu
wp.ocom.edu
ocom.edu
ocom.edu
extranet.ocom.edu
wp.ocom.edu
extranet.ocom.edu
ocom.edu
ocom.edu
library.ocom.edu
extranet.ocom.edu
ocom.edu
extranet.ocom.edu
ocom.edu
extranet.ocom.edu
extranet.ocom.edu
alumni.ocom.edu
extranet.ocom.edu
*.ocom.edu
acutrials.ocom.edu
acuresearch.ocom.edu
library.ocom.edu
*.ocom.edu
library.ocom.edu
acutrials.ocom.edu
test.ocom.edu
*.ocom.edu
acutrials.ocom.edu
policies.ocom.edu
extranet.ocom.edu
kwc.ocom.edu
extranet.ocom.edu
library.ocom.edu

Certificate

The complete raw certificate details for ocom.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfAN6aF/3mdWP2hqj7st
CffgiSG6/OrnxEcspH9yfTh3CWQfekgmSINZhXgR+3xQw9UGX6nt9L3f5UiN5/yr
AetFdCZdDsUYunVqE4DreZj9s7fI7xu3Lgr9SB1yNCx3dG6kADWMxOA6OUgaKFfy
+wjdPXEJhQDGmwvmEDN6Zjw5yI9KDvoFlcnu4JCiBlG7NXXsn7nPeUXpc5qCbQfy
4k7P5wxagNd5mvnD1ykqRl0HbaEfAFktGJGG8MbrOKiIuqSPW3UzBtfCGVP4XbwE
VZWpSe9SThlJ5xvtVsU6sdhEvJJspumg8YGZEffFGN8+5x1LXzp9wk5yLH0Mxy+f
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319854360476704362669693556685639393064286
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-21 06:21:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 06:21:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocom.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21957601969131022810031937377019278876680575732256962393625945794048490709718476463813400026948304613755244485400773055919646401979997561135829121867807053935475828602106499067561790032572493608626289844737566758622457738688232928543054310582692901009827776222681609974408880627115393228509607170424416235428953953147224977431770043371920302765007711782579788056827137888715838825370656630183616883456710166246748111297140946864729850426463960202554651384263812539778675263121676184603867500086768071373837870483631253061912847566831614723689304317399459554618412255716686496623815895683529323203312465008914823356223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a30442dc11555e4a94aecb8c073349df3f007d24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocom.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocom.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf640000016381931495000004030047304502210098c90f77b01ebea130e54078631064a41c0af4a1f9dc8e1ab738aeaf382d2c400220408787fb9cf060f8af52129986d57a70069c2a5d797d2abcec7a39b0fed4abde007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163819314b9000004030047304502200ee089b04e64027a7c69fc429c5a61ef31b7a307c13aa055cd9759eb6f6e7f4f022100cd30054355cd7a198931ba25b8d8a1bdd0107f7629b615c25e6a025ceda6bbea
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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