ozrc.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:b8:c4:28:40:45:1d:68:8b:bf:ce:84:03:4c:6d:28:20 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ozrc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:b8:c4:28:40:45:1d:68:8b:bf:ce:84:03:4c:6d:28:20
Serial Number (int): 299013514614381044832882606773474419353632
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:e6:87:5b:ed:fd:a3:e3:f1:cc:27:bd:fc:b5:10:f1:7c:c8:a8:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e9:09:c0:17:1f:e1:e5:5c:8b:83:9f:ba:1e:b6:ac:5d:78:3f:f7:45
Fingerprint (sha256): 88:54:f4:6f:b0:7b:f9:a4:fb:0b:04:2c:c7:21:d4:35:21:e1:d4:e2:a6:b0:5d:20:9d:72:80:72:35:d9:5d:95

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ozrc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ozrc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ozrc.com

Other certificates including the domain name ozrc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ozrc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299013514614381044832882606773474419353632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 05:02:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 05:02:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ozrc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734680255909757359232412082433861281019125757353641947530021713354558758907085988506610524523277879101343624451587709447953126807528548005898338841243342231664168753756148625597547042299924417975256068648408506574003581470682071982658250058217925459422021698343988709809611705704736231122122372540527810659404441891039104518674957334587107305385038375565054980168712437255280670287695254716139252340808473034155268827527917585029437420982012925892988955862791315342141433581860242905051806534403531575804406553764826806034407489052077058531212836538379693851701538322467262699691456804834769480839982202794594146320011959790393694960488207442497456834711283349602185391154227648428385353293846860296977029806301983435639340719339198878508091660007281397598489378170147090657167279832079625256004160521717387311071017807783320196495552660908519461679282422799769588285653128581750428858298298202944576863781702063399624455954604837158425421745075999972923848682201708257074976012525875860596240008860093632550192243934878805987348351045724747177565328138976782737111126793945418028342354885099482055199411096678263852366576195885331212381742525831041133977274801751111283172001743993604148485003735963182222389744234392348902888803641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1e6875bedfda3e3f1cc27bdfcb510f17cc8a884
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozrc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe8f519d000004030048304602210096b3927da384ba08546507edcac834cb7d689578d1551f069633bd466a008b750221008a83769614500fc59a6634daca9f257c778293a00fa9a57ddc30695acfdac829007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe8f518b0000040300483046022100ba50f43067b6712c836721316cbf4a6a09feb72cd1b4d84b19acaa06c4c1fe03022100833d7d113e9fdc7b54de720ebfea0416bc4009fc7c9144c399a7a1441b949376
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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