www.ozrc.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:c2:db:1e:67:28:9f:f4:81:e1:44:58:d5:90:a6:c7:87 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ozrc.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:c2:db:1e:67:28:9f:f4:81:e1:44:58:d5:90:a6:c7:87
Serial Number (int): 272825183864511363663527843322910350952327
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b8:f9:f3:2c:c1:63:ba:31:14:94:9b:b4:f1:7c:5c:1f:6a:aa:62:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:15:83:1c:a0:aa:53:94:ca:e1:44:44:5c:74:98:8e:4a:e5:91:ac
Fingerprint (sha256): ba:7d:f9:0e:97:fc:99:ab:34:ea:91:79:61:0c:3f:51:29:10:7e:1b:57:c2:3e:25:fc:ad:bd:5f:c0:2b:2f:68

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ozrc.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ozrc.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ozrc.com

Other certificates including the domain name ozrc.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ozrc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9uRQkZ6pS99JWDT8gkiq
9PfvQgGtkjKB3w14DIOnrLcH6WyTsw4WJCTo8CBeetrW1zM390UtBeU/rlEDmRPi
AVVihndWCBa5ISefg/N3v4z+pQLNKTfsHuUitrTPjvhUcyybNzE/IL+j8vmRoAlv
JH+FCGrVvfB/vjUF/hLkg+F9dgec2LCnElaBAfWdn4j0ZC0lWWCZ3cf00kxmV3Fa
7fu6bFDh0LEvXZutaJGeGWaauvW11SY9huG5XOHoliI2RieFKaCS35O1C6CtXklx
l+eIwUGikolZIl2VdBER3bvusghkg/edCj8PAKJtwpjJ/+HDUqxSlVr+PfGGLLl5
m83b5CnrgluW0Fj2gYNdcusR6kPVeaRDaSERat8fsg3qG3rJ3gDkp/EXfHCknPHM
zujMS793P6eRTXceoKTa8fZuupeMxGIG4Vi688dkna3pQ4G3qSm3HzJqMUU6ZEY1
Si7rkzt0t848eQSfOLrS0TKlABWcYCfxAjRihAUIPhUJkxIjCQJq4e+Ij9PGFW1g
ADj9mg6/LgEZSRCLNR/NHQS68d7b/FrdfPMwDY+50mhPbr2ZmI6qanrfHNQ4dHg4
mQwPsFOKnVH97JywxaUz9Fcwz8PpIBut759OqZU5UN+YKU2QbTUyquR8CvyBAs74
R1J/R3x/f6kymAzF2+ATBm0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272825183864511363663527843322910350952327
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 05:17:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 05:17:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ozrc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1007230889175033039729990092705553303965129034382554862002988241520920138859914905334103143062846344743223789445586493301263700626670550227012759268578858797558440780834643659082335793819227951285238719971877816314310693572866105003113829652442175147539582777346758636961609107126329227240597939354418568047462647798658936969704662890144286187367088262814092056294339972480620783927000505236509655644160908289307923364656504519422474115003215156955437207331205464378475727690074366234287151614641223930007659277206328578787283098306877869643063835116670998800957679453295073749499891544483454268006477231221974792609943018852693663717146774405528462263978675599200765052691464291233854124307792738227044420617434830768552008284412070290291649404929904707060660794985533419156512202502006125105290630867782382896360977343554042776356462392912471436973575276699748491016531124516253707790921842252071647233197388859064779982252425401325513592703470092337899337336543822347421974310353208568977547066421505444634937775377011468142222612363148049064003456734618467596167391479715798580547130429910349992951313783518557918178731214492260664355347935385040371832224497908500965084971638102527774369591120383381870531731584995006941716743789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b8f9f32cc163ba3114949bb4f17c5c1f6aaa62a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozrc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001703d321b750000040300473045022100e7c80c34235b9d43bc2d2b6c321d0a7489c9a874da86e41e256bd261911c98fe02207543025d44984b78d4e65397df5efa69dafaab7e9ae0bdbcca2ed48b8f0c5f1e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001703d321b990000040300463044022057399091f2ced517b2d1f26f23e9ad692f58592d09fadcba2d8724fe26e3c656022004d3da256daf9a46563f580362f573e7741136acdb49f660eabf0c0751399f7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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