www.oxtrux.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c8:e0:3a:be:5a:8c:d4:a6:75:a7:a2:cf:c7:86:fe:99:15 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.oxtrux.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c8:e0:3a:be:5a:8c:d4:a6:75:a7:a2:cf:c7:86:fe:99:15
Serial Number (int): 329691383264573993107912629747236281948437
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:72:e5:f4:26:9b:f8:78:8a:4e:01:31:07:22:1a:c9:3b:7a:66:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:0b:c8:85:5d:a8:58:df:0f:71:51:49:55:bb:2e:4b:8f:03:ed:ce
Fingerprint (sha256): 81:6e:e8:f9:d5:03:78:47:0e:30:b7:9d:ce:f0:04:35:81:e3:c8:f2:38:34:6a:3f:82:30:fd:99:e2:6d:cf:58

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.oxtrux.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.oxtrux.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.oxtrux.com

Other certificates including the domain name oxtrux.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.oxtrux.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329691383264573993107912629747236281948437
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-21 21:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-21 21:12:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.oxtrux.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 591145195677686050866406051554730812817940692867221959670469960007438254428299117724804346854379899774058091841350340874217325353367514700182541756684121280794567903874137142449892815691218371377078539255256694506996247192717105834836679483578861440868544607761124853571861373186609418634885478156456977868520101518188014122703705488018350004848960651527639511988058172246752333822121940451936085105117646747566462540346355139915280908256435280725331695026714627709506952635358944492112144260312346309738442018671385784504227781713828915897263698374471381697866218005312365984056982151784695959921207617960117151895312282301736852594014838531490198283087781542243623185310607206821329068961927007433968402955912610233114738801937028753269211419636593333438073020307417362704322627078192827955335155184075862172078419443824883259373338411112057549148254200286703200658800206599995113178100379558577080837496518704254294317827874316149961039824072250014108911777398841876144466748924512159166015582161525646544703960291596489161909773156432996222389865240445576648289361889562281708733018663934772769534098764568974326680096873284335584718273798315905056212058840326882438514209462845941201459048879849051519476631660709360418361239409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a172e5f4269bf8788a4e013107221ac93b7a663c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oxtrux.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000167d2d3fbad000004030047304502202bff083f0e1e25712b13adad2c5ddedeb4bc381d1b71e954aa2be7eace7072c60221009281c9fed93bad2ba31ae19d1b2faa36151a871799ade7ab4ebc44a28ad52389007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167d2d3fbf70000040300483046022100d855ec4d783d4ea50eff2f2725753579a96703814a447e65e1a2655e5b1c9599022100d641bb61b8cf3868441670599a1b52b941f398b7f6aa58a7de29c6e819f7eeef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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