ozrc.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:6e:b8:c4:28:40:45:1d:68:8b:bf:ce:84:03:4c:6d:28:20 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ozrc.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:6e:b8:c4:28:40:45:1d:68:8b:bf:ce:84:03:4c:6d:28:20Serial Number (int): 299013514614381044832882606773474419353632
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c1:e6:87:5b:ed:fd:a3:e3:f1:cc:27:bd:fc:b5:10:f1:7c:c8:a8:84
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e9:09:c0:17:1f:e1:e5:5c:8b:83:9f:ba:1e:b6:ac:5d:78:3f:f7:45
Fingerprint (sha256): 88:54:f4:6f:b0:7b:f9:a4:fb:0b:04:2c:c7:21:d4:35:21:e1:d4:e2:a6:b0:5d:20:9d:72:80:72:35:d9:5d:95
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ozrc.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ozrc.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ozrc.com
Other certificates including the domain name ozrc.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for ozrc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSjCCBTKgAwIBAgISA264xChARR1oi7/OhANMbSggMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIwNTAyMDZaFw0y MDAxMTAwNTAyMDZaMBMxETAPBgNVBAMTCG96cmMuY29tMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAtBWbRAypEJQdZ16Bw0BC3rWVqQ6LB8YgTCD3kqy9 5L4ONWbnX003vhZiE2I2rK8dD6U4GxDKH/Lq9Mp+vYc2KI/2MPQQux75apw0RfRM 14d78f2kKwWZ1mY0ZRRrRVG9HT/Hc+9/ZzFUTAunBhWdUj/gC0e8G5thbTjYTIFv LyFDuyeQXB9uYJIAtPDQvGOWE5FQEuj5Sw8ESo1LaqW8URr6ifMJBWaDB7U0uTfD r2v2bE1hyMqR1gAs7OngE80kHfXOOYVf256sIrOVhIxp2QMDSzVvrLXuYIjoyy4b mkWJ8jeu89dFXat4T3b7XWfyqZAs1mr3+V1iE3pLoFfyn5K4FZU0hhVAEwJn4Pp6 l9S0XrhHz7zDSs14AMCnDw1/+114zg3vUkSTyRfDtnsM1ncvMEFh0dRgiMcFM0+O oTusmOWH0Wrc2N+zwGOKDjl/gg9S9w3DVMa9X9njeM1IJs1BBNlGqWpROqNkWzKg s+EIyHoeYw7uVZnUZiR2dS1ocnLK2qlonZlC1vh5PZ2UNffjEVvbFgRdNPVy8eM3 jqbSxpsbZ+O0loRTYnYco0ZGB+KRnCuzatY0LKZ/IDSFUOyJGO216UtDSkRFTD/a QZMO2kFuENvFLu5Jnc2iD03lr8+oIKViUNb+SotXjq2egmX4iiLMgldTbaRKA/Ab jTkCAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUweaHW+39o+Px zCe9/LUQ8XzIqIQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYI KwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0 c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0 c2VuY3J5cHQub3JnLzATBgNVHREEDDAKgghvenJjLmNvbTBMBgNVHSAERTBDMAgG BmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3Bz LmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AF6nc/nf VsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABbb6PUZ0AAAQDAEgwRgIhAJaz kn2jhLoIVGUH7crINMt9aJV40VUfBpYzvUZqAIt1AiEAioN2lhRQD8WaZjTayp8l fHeCk6APqaV93DBpWs/ayCkAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt 74uQXgAAAW2+j1GLAAAEAwBIMEYCIQC6UPQwZ7ZxLINnITFsv0pqCf63LNG02EsZ rKoGxMH+AwIhAIM9fRE+n9x7VN5yDr/qBBa8QAn8fJFEw5mnoUQblJN2MA0GCSqG SIb3DQEBCwUAA4IBAQBCGW0Y8th6T5dpmkoYaRUmdbSwexS3qw98KTDKo8oU/Wfl cpD8BkjaEigkalJDkaEMRFj/3OXfQNjmr7zKo2LPR/3XTAa31qlFxMxxPRjVq+s1 /jfgTNK6E6SxUEQ2JdZtq9cHLCCjWpzJHTo+M2NeXk1gNd9ERv8rAPB22Qn0X+jF zBNL02fIFYSJ6eeSM98edCaOHExH/M2ZlwSYCkY2v19SE5H4TaQgU72PI124jpue ViUrU8AXpv0tG85CiSFkA7Sx9trxlYKZQD7IoVBptunJKIv1UL7u60mbsqcEZk1G wilKoE6A6u+fOzk8/y5Rj8N4S/yafzIHeh/tnRMg -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtBWbRAypEJQdZ16Bw0BC 3rWVqQ6LB8YgTCD3kqy95L4ONWbnX003vhZiE2I2rK8dD6U4GxDKH/Lq9Mp+vYc2 KI/2MPQQux75apw0RfRM14d78f2kKwWZ1mY0ZRRrRVG9HT/Hc+9/ZzFUTAunBhWd Uj/gC0e8G5thbTjYTIFvLyFDuyeQXB9uYJIAtPDQvGOWE5FQEuj5Sw8ESo1LaqW8 URr6ifMJBWaDB7U0uTfDr2v2bE1hyMqR1gAs7OngE80kHfXOOYVf256sIrOVhIxp 2QMDSzVvrLXuYIjoyy4bmkWJ8jeu89dFXat4T3b7XWfyqZAs1mr3+V1iE3pLoFfy n5K4FZU0hhVAEwJn4Pp6l9S0XrhHz7zDSs14AMCnDw1/+114zg3vUkSTyRfDtnsM 1ncvMEFh0dRgiMcFM0+OoTusmOWH0Wrc2N+zwGOKDjl/gg9S9w3DVMa9X9njeM1I Js1BBNlGqWpROqNkWzKgs+EIyHoeYw7uVZnUZiR2dS1ocnLK2qlonZlC1vh5PZ2U NffjEVvbFgRdNPVy8eM3jqbSxpsbZ+O0loRTYnYco0ZGB+KRnCuzatY0LKZ/IDSF UOyJGO216UtDSkRFTD/aQZMO2kFuENvFLu5Jnc2iD03lr8+oIKViUNb+SotXjq2e gmX4iiLMgldTbaRKA/AbjTkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 299013514614381044832882606773474419353632 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 05:02:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 05:02:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ozrc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734680255909757359232412082433861281019125757353641947530021713354558758907085988506610524523277879101343624451587709447953126807528548005898338841243342231664168753756148625597547042299924417975256068648408506574003581470682071982658250058217925459422021698343988709809611705704736231122122372540527810659404441891039104518674957334587107305385038375565054980168712437255280670287695254716139252340808473034155268827527917585029437420982012925892988955862791315342141433581860242905051806534403531575804406553764826806034407489052077058531212836538379693851701538322467262699691456804834769480839982202794594146320011959790393694960488207442497456834711283349602185391154227648428385353293846860296977029806301983435639340719339198878508091660007281397598489378170147090657167279832079625256004160521717387311071017807783320196495552660908519461679282422799769588285653128581750428858298298202944576863781702063399624455954604837158425421745075999972923848682201708257074976012525875860596240008860093632550192243934878805987348351045724747177565328138976782737111126793945418028342354885099482055199411096678263852366576195885331212381742525831041133977274801751111283172001743993604148485003735963182222389744234392348902888803641 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c1e6875bedfda3e3f1cc27bdfcb510f17cc8a884 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozrc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dbe8f519d000004030048304602210096b3927da384ba08546507edcac834cb7d689578d1551f069633bd466a008b750221008a83769614500fc59a6634daca9f257c778293a00fa9a57ddc30695acfdac829007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dbe8f518b0000040300483046022100ba50f43067b6712c836721316cbf4a6a09feb72cd1b4d84b19acaa06c4c1fe03022100833d7d113e9fdc7b54de720ebfea0416bc4009fc7c9144c399a7a1441b949376 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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