www.ovavo.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f2:a8:d3:12:ec:6f:fd:69:2c:a1:87:47:39:5a:4a:60:d1 was issued on by Let's Encrypt.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ovavo.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f2:a8:d3:12:ec:6f:fd:69:2c:a1:87:47:39:5a:4a:60:d1
Serial Number (int): 343909596851892743223376572924504587264209
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:d9:76:cf:68:58:cd:2e:12:15:80:fc:93:e0:ab:ab:9d:60:82:cf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 10:a8:b9:7f:26:c5:ad:de:b3:2a:a9:60:f7:b2:a7:2b:50:05:5b:bd
Fingerprint (sha256): 95:a7:d0:f7:4b:12:59:af:47:55:98:f5:5e:78:4c:27:e8:9d:2e:2d:22:81:b3:4a:61:ea:0f:76:40:da:ed:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ovavo.co

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ovavo.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adinova.co
everhire.co
handpic.co
mypearls.co
oddfly.co
ovavo.co
parfly.co
pensons.co
secim.co
selsor.co
telltech.co
thumbot.co
tuskar.co
www.adinova.co
www.everhire.co
www.handpic.co
www.mypearls.co
www.oddfly.co
www.ovavo.co
www.parfly.co
www.pensons.co
www.secim.co
www.selsor.co
www.telltech.co
www.thumbot.co
www.tuskar.co
www.zenball.co
zenball.co

Other certificates including the domain name ovavo.co

(limited to 100 certificates)
vehicleinsurances.co
www.copie.co
golfcoursesguide.net
www.mercuryisrising.shop
www.handpic.co
www.soloviaggi.com
illinoisprobate.co
credit4coin.us
www.securitygroup.co
www.ixirbm.top
www.stemcellnerve.info
www.ovavo.co
pensons.co
ixirbm.top
entrepreneurschallenge.com
pensons.co
indiavisa.in
dubailawyer.co

Certificate

The complete raw certificate details for www.ovavo.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G5Uy0KpN22ITTudQALv
VnUIyUlRCxOIdJcFVlvpoFWkqvRJ0TZLeJgqcHtw7s+QZKMsskl8u9MHQR9m4+FA
aS2NgU5UvMGlc374JiWRe89J8fnbpImYGl/VPey8MOlzqb5hgiPurp+0JreItTOm
7EqdNaPGuVKORG6fx8gQTDvC+LBXEW8B0B4JG604JcKaqs3yJyRycjW46PLkbwmd
wFLV8mS7vaLZ4BieoT35h4Cu53DXlhMuRA8btvpu2/sUP+i7BcRXe8bcp55atqzS
c0w/hFPBL2mlCVF/HdGXAREeDzEgEOcz1WJiCrAcKJlPbmuyWmBocFL+RiAnsiWv
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343909596851892743223376572924504587264209
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 17:57:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-16 17:57:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ovavo.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26816927008347909118244218513309859916343751073687693240455635103938258085504811993376428779467986618571323616130959133436484573421604290924016652378183638452340008333043027454776865111738067007352149545668131193594524782122653051499999915803211982992780431606910898858685507016738130095782160195657170339878429232094576582639398466996087887247951524022321234406905504310730233236272835953216035768680199779848324552199532665564505445988367528530925435445729003088472150475513140797707338422175809650734416548000019101555339045573181133084849179252730306998453295493989302743998609568277251196448958380883161764966243
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bed976cf6858cd2e121580fc93e0abab9d6082cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adinova.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everhire.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'handpic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypearls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oddfly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovavo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parfly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pensons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secim.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selsor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telltech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuskar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adinova.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.everhire.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.handpic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mypearls.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oddfly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ovavo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parfly.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pensons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secim.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.selsor.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telltech.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thumbot.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuskar.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zenball.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zenball.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c0671f26d000004030046304402200e106746b48e979ddafd689ba91f84f7530aa1870613b586ffa21f7d9ff3b4f402204f690fcc25a3eb57b8157d7be27e67f0edf16261deffb6c2df09703bca9c13c0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c0671f0b4000004030047304502201ce257fe2b8d028b7c50a90d6b9d4ab44055ef649c88b345942e3ce3e29f7387022100bff5183eaaf2e2af93bebaab19665c8723d97b810a339fb5f16069689eb52721
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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