www.crude-oil-pod.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:72:ec:91:c8:8f:41:43:e1:a8:3b:e6:2d:59:75:41:70:39 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crude-oil-pod.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:ec:91:c8:8f:41:43:e1:a8:3b:e6:2d:59:75:41:70:39
Serial Number (int): 387555788313909445676509753157703482568761
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 76:d1:f1:58:32:3a:0e:6e:ff:6b:0e:24:0a:43:a7:13:64:4b:22:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:ba:2b:0e:87:35:43:4e:6b:82:69:52:38:b6:ba:ab:75:ef:3f:92
Fingerprint (sha256): 83:f7:a8:c3:2c:b3:ad:3c:3b:7f:0e:af:1e:8b:2c:c3:71:9d:18:6c:af:53:55:d5:1c:88:33:50:ab:4b:ab:0f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.crude-oil-pod.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crude-oil-pod.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.crude-oil-pod.net

Other certificates including the domain name crude-oil-pod.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.crude-oil-pod.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw183rj96WITe0pyZZQIq
3t4uLyXna/aVrKH1CP81bTQeXUXeXLG9nkrzQg/BFRFtx3bTLSE1J7pfCCrxCPpa
q725FVUtKWYu1TXmPNEaZdiSOMuEg4WBcxn6Q9kLT1xTp560lbym8JsH/5cXdMq1
CfJqgjYwzbIyCZ2hf3TQyRK0rYuLsPBkuB/9lj08Z9CEvQ+WhpDJlju+EUNg1yHN
2lf+eK0axT+N3/t4Y3WnkZ6dSTdbUXrv71ZRuYhvilEGMm3wPHYQMoe8DRSyM/pO
+z8GGPcCXE90Hczh7lNfhCCRBdnywdrnV/4ZMUMIAVMCahMEMpRjfe1vZ1DBjDgt
tzDj6hDK7NMy9TxQsyAzoKrt5/1bv5zoeFhqhiwVSB3nONbRfKmD50n9ahe8XkHj
TFeO3Nnuri6gwKX4j3xvrqzGgTk3IXmkkT87ffe4QskebKbo0okDKSqVt2syeG0x
oVXyTtFv3c9gGjUPBhYhA7YjBkGOjc75tLXt8HDrD2xbZH7p43wl1i60uudW5QrW
/x3lGhD4Y7v5gQJzY2hhD5XlVLkzidT4JhGnNyoqQiUf+dCQrup1VCh9BObLuaUJ
nTT8XGuXoegrHgh0HXil2R/PboYIvRjk19rtBxX4skpKLYbBOTUBuJ4SYFZ73O9w
xc0NdV/7elRwyXgnl6FNIJMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387555788313909445676509753157703482568761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 10:32:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 10:32:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crude-oil-pod.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 797047989824480720435314715748278688783520453223753372063889005301629226436121393844563071977214794830063240248335197457982730443852737040505065651451160726284310727741895754986582397747176235550278677356470347232396700135051551333388372574243752017827569830408549768492796400870573380137507482337287330466733578728736500134592644185328283034427456793007084193886971848842365395301123958893793407643445922461573333432503451108103385279661735512301749548306543609454344782792305504236618232718285117409582791186497076644731550704611550553955028635266330494094061580665404936326518165612563626443466664040790866961809324243720783820301108746727379073088710065959261879808963961791360191074296508852507490956090753047649042894181740442680286758737730349627637706659650922398861309211215658328387166440407685294385604697601043688577929942122559293401626874352149026303195962969281716037270611699687368126496591164707426817668377246446105541861099597494969741748847333110647285829598646509659946633633199128329774091119078540827893208178415841084780170636845004467075235122106243500470652117623454433347572890495687636974068189461166922676968777532014295723971443989031826997169755720020696739403861637344347175760376845572095260859637907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76d1f158323a0e6eff6b0e240a43a713644b2292
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crude-oil-pod.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016db570d4830000040300473045022005f9c873ea2b46a798852bcba5118cbf5add8c15d05b1b9bca5095c8330afd3a022100f193c5a52736f6a697a2bac90fd7a17539b0c3e9b830bce05182dc838c8898d70076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016db570d4ae00000403004730450221009f26497a4d087429e4a1027d676f457094c911c107860a13759b4507d09755bd022021a0ab5da812842b31bb0ddb2b2ab68d408dba04166f7e748d47b333bd5b76f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00217bc9c055b5316e6e5b48c86bf5b4f57cd51e1ad2def921f2b27ba8298eed275478e12584dc4163a8101113e0319847cff093bb1b54d877b4a0357ef1b899f69762189858c283e01860a952944b8009d4974f0881c7016ad3d7258a463a0a6ea1e311a6223f4442d242ee8411afece5a4411bf236db78a5764b500e4964b8caf637f080e2831c4295b1b6a6f0f85a1f6a44be366d26e2e3ac19b21412d54dae0d2f8ed6f9b3b71b5f0d38e204466a35927083a06eba7b81267a4ebab252acd1e9e5eb93c017811e14c8f50eaf58c4878f1d59965e57c4483ca7204e4f493ee0b792f53032083b831aada3f1e2e5b8b53ad755cc19520d2735c88a4f2c3b9f43