ourlinq.com

Issued by R3

About this certificate

This digital certificate with serial number 03:83:34:37:50:fc:79:78:2f:16:38:af:00:e9:57:70:26:5a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ourlinq.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:34:37:50:fc:79:78:2f:16:38:af:00:e9:57:70:26:5a
Serial Number (int): 305983254936627571919860460272646326593114
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4b:2e:e3:31:9d:fd:96:85:ee:7b:3f:d4:82:d2:71:86:fb:9c:fc:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 6a:f0:9c:99:57:d4:03:46:f4:94:ca:36:bb:e3:30:4b:ff:3f:60:b5
Fingerprint (sha256): 86:d9:bb:58:27:fe:57:d9:a3:b2:db:af:b3:0b:d9:4c:d0:fa:22:a3:e0:0f:33:df:05:03:8e:56:1f:76:a1:34

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ourlinq.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ourlinq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ourlinq.com
www.ourlinq.com

Other certificates including the domain name ourlinq.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ourlinq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJikBYC2WCeW9w7hRrec
adZg81x1il23tpZnBZseFv6UggzPY14415lsG93sbjU2y9anbPEixS/lMJfOQuZ5
BZw9/lWfrWMp2YaSmyWHA5LmLisSGoODoRNPXWRURvBpPUHtTXQ847nnF3bLoj2Z
shVopd5GdLqBDefOYf54BLo/gdk7QkxCOFU7pzomRRii1JwzvrmMkJDBiXKGKBNZ
U/CZqSxu4iw4A8ZZMPU6yZFzLhhqFxDpmh7fOhjZXGJo3jKVH3fU1Zxke2CHWI4K
YaQLNHKA61fMdlDGNzriIwOPfK4EVKNN6KJ4Li3oX4w7tsUeBNHDiDLg7fL7s7IO
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305983254936627571919860460272646326593114
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 16:25:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 16:25:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ourlinq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25827884152016034929851901684032171607004169461778729456322539131731403169774324615833874128891807043458523668163292568470389858258629503297742075603613327336468841380440584285230176027091947929486038531798897852828504070664528243267542193275628226809661547298975476984900501159421866098821959697465925718204163538634595894275204081203653902302392077152463224386507368796229195004099338146660689535332982659121281459961866878398331257347572423846704733049820341919488538545429927777608225540088978975693254322826470433574601695194801687100945960710271834161257880819885917006430015860968022190653418199770302384311969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b2ee3319dfd9685ee7b3fd482d27186fb9cfcbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourlinq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ourlinq.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aae7a0bf80000040300473045022100e8c8b6d50f79be2421443cfe4fe8e084196420a5ad667e3c3a16fb6aa2ee4e5302205d87d8c05f11ab550c141b63009319bf28bc69ea0569b0c685420079151f86060075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aae7a0cdc000004030046304402206a64c0a4d134731d187dc211c85f7299b8bf1ad1bd9c6dd9eb9527f5a51af5ba0220418e0ec3a6c92ea177670f6b95e61b7dd15dac3fbc123569706cd399ec669f46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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