www.ocgco.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:39:36:06:dd:78:52:c5:03:79:a3:d5:45:4b:25:21:95:7d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ocgco.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:39:36:06:dd:78:52:c5:03:79:a3:d5:45:4b:25:21:95:7dSerial Number (int): 280804766667273286877720287376307606623613
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 50:e6:87:42:57:71:1c:fd:e7:b0:69:8d:5e:5f:81:a9:38:52:45:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 8b:cd:c0:49:6a:db:d0:16:87:a5:58:15:cc:8d:fc:73:03:53:44:e0
Fingerprint (sha256): b6:29:3c:04:58:74:6d:b3:df:42:58:7c:c4:a0:a5:c5:aa:86:35:10:5c:2b:a3:cf:6d:a3:4a:9d:48:bb:30:3e
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ocgco.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ocgco.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ocgco.com
Other certificates including the domain name ocgco.com
(limited to 100 certificates)
www.floriana.org
ocgco.com
www.ocgco.com
www.uvpondfilter.com
wildlyhappymarriage.com
ocgco.com
fundydiscoveryaquarium.com
scarpedacerimonia.com
www.ocgco.com
responsibilisation.com
ocgco.com
ocgco.com
ola.guide
307exchange.com
www.ocgco.com
www.stock-cases.com
www.ocgco.com
providencebeer.com
autostoppisti.com
ocgco.com
www.ocgco.com
www.uvpondfilter.com
wildlyhappymarriage.com
ocgco.com
fundydiscoveryaquarium.com
scarpedacerimonia.com
www.ocgco.com
responsibilisation.com
ocgco.com
ocgco.com
ola.guide
307exchange.com
www.ocgco.com
www.stock-cases.com
www.ocgco.com
providencebeer.com
autostoppisti.com
Certificate
The complete raw certificate details for www.ocgco.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISAzk2Bt14UsUDeaPVRUslIZV9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMxMjM0NDFaFw0y MDA2MDExMjM0NDFaMBgxFjAUBgNVBAMTDXd3dy5vY2djby5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQDcY+rew8U62P2M5qNU8oWsHq39AL1O//rD 0ukP2kPc62nEdVM8s17nefOJ4VrEykCgXVTGgzk24fwagC9/WdUgazEtz8P7po8R KXZVhh2Rz33UdSLaukK/IlYtemgYa97UVBaE3M40x1htCwGiTaiXiX0kGXzwkvIy nyuKLhJu5UyRP/Cd9wBLAyEr5rxMGK5pN4r0TFXiW9n3ppdfB9qNsg7n6YghPyBi 4jybFg1SEgf2E0KdQRfx2Yc39PlJZUqbqnw87FVLIMy6n2SKu+bqXA22QyDE3U5p wYFPzZynUNQCxHMDzWHHNTrkRG5mOEgBuQo/X7ZcQg4fPhmG/8IUqWvS6IFJbmRx whsZK0SlmvMAXyf1+RIOtyjDY3cE525DDg5wL6gB31Yh60UTEeGccsFxRtlndJ9e Hnq/1WCBT+dl/ke7fMbgcvKBtJNF6QsLtTzwYZ/D5uRFVYpHv/G8DoCCrgh2mnaM so+Kzqh78Zc4AOyVemEnIeG9qUxAThFwokCFprnRHDLrWMbvMO6EWF4rkChErWlG p3i254OxF2Jq0yPl1CgdKYG9xGaguKZrLle5EB+MKOyX0bjGVNV7ZhiH4g887agn btMNxav4hDHUm3kBz/VIYwup+olhxcYBApz/cZHvvWyteR0VznfSGtdKm2YmQwkL nmEe+ZUJrwIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRQ5odC V3Ec/eewaY1eX4GpOFJFqzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDXd3dy5vY2djby5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHz APEAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXCgmw4SAAAE AwBIMEYCIQDty41dQ6ETq6zj/ejWVVE1WNe6Cox9Z9avCztFGiiNmwIhAIkWldAA EM50n4Wfqt26JQyxEfMt0xN3RyvTFu/CsVhrAHYAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFwoJsOGQAABAMARzBFAiEAunbc/ff4U9q0Q89ElQ7M rrTBfAeKO6ci6byF8K5xQO8CIDS/Nl2mEP5qBpbL+h1BvSOTiHsCog6wyqRMOeuI CDM2MA0GCSqGSIb3DQEBCwUAA4IBAQAhcpDDRihn3YV6JYyAKu9ArGvpNB1oO8G4 P7+SIIRxgCYn4WCx2bI529cN/8+Z1Qo5pqyiQ4LHBsgGO/Dl7QFp2S/zm0eLm1IC VNXRjLEpsEuHGxDQwz8ON2ZIYf7NI0ejxAOg955j8AndemHc1o0q+ZJPTPgdINTG jOBYjHZTYcphV8L1MTwg8J+HwscQ+MuuHy5DYHNhtA+dfiqnOIrrwXvbNiM+uxwE Ic/Bavkg+cqoZhsSxl+nAZ1eIwlrvLe55nP3+zNKZeOqoLblnHV/oW9k+R5iKTCX c6+qHaIuYNwN9UHn98uM/HYb2SbRgL9BKzo53WlgWcyLd5FkNI+0 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3GPq3sPFOtj9jOajVPKF rB6t/QC9Tv/6w9LpD9pD3OtpxHVTPLNe53nzieFaxMpAoF1UxoM5NuH8GoAvf1nV IGsxLc/D+6aPESl2VYYdkc991HUi2rpCvyJWLXpoGGve1FQWhNzONMdYbQsBok2o l4l9JBl88JLyMp8rii4SbuVMkT/wnfcASwMhK+a8TBiuaTeK9ExV4lvZ96aXXwfa jbIO5+mIIT8gYuI8mxYNUhIH9hNCnUEX8dmHN/T5SWVKm6p8POxVSyDMup9kirvm 6lwNtkMgxN1OacGBT82cp1DUAsRzA81hxzU65ERuZjhIAbkKP1+2XEIOHz4Zhv/C FKlr0uiBSW5kccIbGStEpZrzAF8n9fkSDrcow2N3BOduQw4OcC+oAd9WIetFExHh nHLBcUbZZ3SfXh56v9VggU/nZf5Hu3zG4HLygbSTRekLC7U88GGfw+bkRVWKR7/x vA6Agq4Idpp2jLKPis6oe/GXOADslXphJyHhvalMQE4RcKJAhaa50Rwy61jG7zDu hFheK5AoRK1pRqd4tueDsRdiatMj5dQoHSmBvcRmoLimay5XuRAfjCjsl9G4xlTV e2YYh+IPPO2oJ27TDcWr+IQx1Jt5Ac/1SGMLqfqJYcXGAQKc/3GR771srXkdFc53 0hrXSptmJkMJC55hHvmVCa8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 280804766667273286877720287376307606623613 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 12:34:41 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:34:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ocgco.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 899113990587825031793068921914260461777150226897143967346544252730874732303450600992777207476353856571549653819569868221153310659935108906846313828025868323961867888120613701848043542301960500963362061967285650657480110297504063646869040379558091047420803761976582907993970892590798181591981365878672593882971878168870957435915288090920798752052615595061109618504206577618149946652970029669255106018449530472705191772375676706007814444168232076507835106177028958476763417364048482770959120539884567891007291875586735953751355475041109473920666985909684455193256424007472152434087537724218797977430322789810230367530288521557573330109256824623084444656361216458940425110233352530806962843501902328742469524300524858470744887862842772475092845255925665987151864179736712996394928686895128188244088383332674703217869591305114024272997416573990795189701984025262806352791146220102885544309628595355516264709323432562535837646044308675500226307762526068420973884548604351031915967173120127461771634159486907166733326954761731782371440897348599843431517594657108210462515289101036431329116793466889552697884167533818707145070808412393576333447616013597473558905799328922554325923084923313270056494383251954661087987997197782624788811155887 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 50e6874257711cfde7b0698d5e5f81a9385245ab . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ocgco.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a09b0e120000040300483046022100edcb8d5d43a113abace3fde8d655513558d7ba0a8c7d67d6af0b3b451a288d9b022100891695d00010ce749f859faaddba250cb111f32dd31377472bd316efc2b1586b007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a09b0e190000040300473045022100ba76dcfdf7f853dab443cf44950eccaeb4c17c078a3ba722e9bc85f0ae7140ef022034bf365da610fe6a0696cbfa1d41bd2393887b02a20eb0caa44c39eb88083336 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00217290c3462867dd857a258c802aef40ac6be9341d683bc1b83fbf92208471802627e160b1d9b239dbd70dffcf99d50a39a6aca24382c706c8063bf0e5ed0169d92ff39b478b9b520254d5d18cb129b04b871b10d0c33f0e37664861fecd2347a3c403a0f79e63f009dd7a61dcd68d2af9924f4cf81d20d4c68ce0588c765361ca6157c2f5313c20f09f87c2c710f8cbae1f2e43607361b40f9d7e2aa7388aebc17bdb36233ebb1c0421cfc16af920f9caa8661b12c65fa7019d5e23096bbcb7b9e673f7fb334a65e3aaa0b6e59c757fa16f64f91e6229309773afaa1da22e60dc0df541e7f7cb8cfc761bd926d180bf412b3a39dd696059cc8b779164348fb4