osa-market.ru

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ea:ab:a4:59:69:bd:e2:c4:52:aa:70:ea:16:d7:e9:91:1c was issued on by Let's Encrypt.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=osa-market.ru

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ea:ab:a4:59:69:bd:e2:c4:52:aa:70:ea:16:d7:e9:91:1c
Serial Number (int): 341191082992256539316495622188209942401308
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:25:fc:a1:eb:9a:81:1c:47:8e:36:9a:e4:55:2a:a4:d7:a5:8e:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:ba:a8:a7:f1:9e:6f:d8:a4:35:fc:ce:ed:ab:12:1e:66:03:ab:60
Fingerprint (sha256): 9b:63:a8:31:13:72:a2:3d:7b:71:a3:39:6b:45:38:c2:35:3b:93:d9:8b:c6:2d:76:e6:24:31:f1:8c:c6:0d:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate osa-market.ru

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for osa-market.ru

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

osa-market.ru
spares.osa-market.ru
www.osa-market.ru
www.spares.osa-market.ru

Other certificates including the domain name osa-market.ru

(limited to 100 certificates)
osa-market.ru
osa-market.ru
osa-market.ru

Certificate

The complete raw certificate details for osa-market.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341191082992256539316495622188209942401308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-19 20:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-18 20:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'osa-market.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 814019167844395908972900912501253262788760427575581873084382241770688762105844456721738821106501779891260936129868207087152207723683535417950549241955289096269526212963271596646694813931654308067365365646806198937925790464902112631665603089386556940530811046925057076402806378867328416257286606004157899493818600874843052739132496050739580376073054535934141768537544122652520025902278557170154645361020801018727160571948354355526469318923079322291014132968679082354920885968508773786051727050813588393386479239614442496204566648323805672096987386464803735685297257934345134097838044852106805076417543674526000606105572467637903306915170749247430520931853278444367140967003439796061077007262829774552369350675741593683485440819074498931558323105227273472741942559761188447785862114804458777252702606859506669801323597911858595142955602493373767660348257892572689767359164954741373543586322588564134253037727818122018542290978822567672034957989793535363227538689368316613611203013943285565325414287462731464901273467697306201584041316744062888866087239490165509670708041013556283014925355349598650846435926816693742670211743398533142190029871477859936121759816975449805119324181313653378776471871921917141030354831938440187451979373849
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd25fca1eb9a811c478e369ae4552aa4d7a58edc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osa-market.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spares.osa-market.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osa-market.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spares.osa-market.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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