ovali.dns2.us

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:5b:f6:ca:89:93:18:18:40:24:f0:e1:ea:8d:0a:24:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ovali.dns2.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:5b:f6:ca:89:93:18:18:40:24:f0:e1:ea:8d:0a:24:20
Serial Number (int): 269966158128894350065762026087203885163552
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:4a:75:4e:a6:d5:20:84:a9:18:15:73:e6:2f:58:99:46:a3:86:a2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:b0:23:86:05:a8:f7:c5:4e:8b:eb:3d:42:14:d6:0b:7b:a6:b1:9c
Fingerprint (sha256): 7d:73:eb:12:2b:aa:34:30:83:83:4a:c3:a7:64:14:f1:ea:6a:e1:fb:5b:82:fc:0e:da:01:02:17:76:93:7d:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ovali.dns2.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ovali.dns2.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ovali.dns2.us

Other certificates including the domain name dns2.us

(limited to 100 certificates)

Certificate

The complete raw certificate details for ovali.dns2.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISAxlb9sqJkxgYQCTw4eqNCiQgMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjQwNzI5MDhaFw0x
OTEwMjIwNzI5MDhaMBgxFjAUBgNVBAMTDW92YWxpLmRuczIudXMwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCu+16tiZFklhbiY6VxHMLimAA5nUTHkAmj
cL2PVJW09TLEJ4ojyc9IzRqi7Bo/R+9SST3+WVM8blVR0q7SrGQXZgfmr5n51xvA
30+OtVwTFzaHFAVf0R0ScQAswuRraD5vokwP8/nB8M2diS72kiRmSY4ANo6N44Dr
H9GwVnV9Sx6TsJXisDZhwAtVF0DaOb39CApk+v0DGpeZGgCvlZmQL9kwfwjlfRy+
95Ox0kBB9gC8wImoN6i7KyzjJckcc6TYz/aOFeP0S2vM2DF1NOS410oDpO0dmgeY
43vE90BnJMgcthyipME4JhqGlPomM4jlSICAF1p7zv5LDNuz26dJAJcIf83wp3Yb
RBADMy0z72vPQ4Kq7WL2U1i5soFmfAau3Geuv9ekgD0Flo6WS7t0e3Rgiy/UFCOC
NfEbZxN2tOBJv2yFzRSZ0Xfmy5k3Q6FYiC3bHWS51xB3F1SoTJ3UJKmTtxW9NbUs
RVAL1M2XdENvV+g7ct/RHNJQzKfUlUZ6c8y4cuQ+jfviO5HbyNdJJMu1KbuPH9Kk
kzNOSKPtL4uW4evCDuAQIGu4aPPBDxzLNeippCWf9jhd7jZAYDxmwSFG3kHzUeqy
A6rotVrYkn71MiG505H/LWxCM6SgI+XvBZW48NMdO9h/Xfs3hjaM/46PqN7RGTtG
riXGX/kMPQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTVSnVO
ptUghKkYFXPmL1iZRqOGojAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW92YWxpLmRuczIudXMwTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWwjGS+LAAAE
AwBHMEUCIEhLthftFD9u5+xjxGf/xruO1+XFRG/zutyYSdkwD7hbAiEA/sCyXMHU
tDNWeB2VRFpntYoVZD3zz/GWG0JFLAv2E7IAdgBj8tvN6DvMLM8LcoQnV2szpI1h
d4+9daY4scdoVEvYjQAAAWwjGS9rAAAEAwBHMEUCIEJNkQv4XyUKQE2gl/KDylQP
iKk/m5EARoXV4LicdCulAiEAyVE5LFC5RMqqWYaCKYkODy66uzZRNw8I1rs0AzPJ
gZQwDQYJKoZIhvcNAQELBQADggEBAC/f8BByitzbDgoCyL6iVLqU1F8ceP3WmtiH
Lvuhe2lfRF4vRza8B+QXYeoc9iKu0eyDWAy2v4t0+zucGjgdhLsYCeqtr+oduibh
doEByZ+LQFfzr5Q4hcEc1kZ3rLGLBNDZUPoTPqTvBgFl1Ej1HhUx4NmPdiWwI0Q9
IwnMr8jsXlvA+fu6fFychl4Gw/n+WfVxsjVH7MBK8IHGLknbkbDY3bbkhAVhivJt
1VPA8IHnR+N4BHVT/FuyLpAY+vfkCUD0aAW9UJfBt2Va0+hRQRpKEkPhcDD2G3bf
5HzcIVxPzcw/1W/o1c94VbRlyqutWzlbq/yXiilfiDEX2gq4/EE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269966158128894350065762026087203885163552
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-24 07:29:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 07:29:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ovali.dns2.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 713863925093920769057951109636453770007543985861431629148397399042864157835151892842161647523591081811290116576291802394701803287522891530983597296276309373450631137986111667368276978843668737697291339732472058328199324177998786165247706895945993874376401786828523395965390968513904214434438772963686110649035552839260475383480401789387596400175397777627511463712314080167673862957127329380178623716432051217151078129693879649288306441201112160669737749455168705882153321732634053414019481578749850954437648570673773625586463723988247169597037642782393383556674599849492083882462468854814519621863218190238271818347167757530541352877366561531288127888460077675995712407459107405019982900957200183089797883049871487140436318027353655799044514062560985977613297013846461699835028584552417185181655867827804765965774598025922929739529958360632118305161629908055265146826619186245292630327114634626531587223927343822690514810925751831028095924834605895475303428418460538865131041001637696515910402895987254006110092439959621228872826338855940891695209631639358479589461416977874469807438460768441389468517710941669999914986817367942909619367308994987955580117497885317223094926414657196832464390880971961852800724688038712733252336553021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d54a754ea6d52084a9181573e62f589946a386a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovali.dns2.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c23192f8b00000403004730450220484bb617ed143f6ee7ec63c467ffc6bb8ed7e5c5446ff3badc9849d9300fb85b022100fec0b25cc1d4b43356781d95445a67b58a15643df3cff1961b42452c0bf613b200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c23192f6b00000403004730450220424d910bf85f250a404da097f283ca540f88a93f9b91004685d5e0b89c742ba5022100c951392c50b944caaa59868229890e0f2ebabb3651370f08d6bb340333c98194
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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