www.ozrc.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:21:c2:db:1e:67:28:9f:f4:81:e1:44:58:d5:90:a6:c7:87 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ozrc.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:21:c2:db:1e:67:28:9f:f4:81:e1:44:58:d5:90:a6:c7:87Serial Number (int): 272825183864511363663527843322910350952327
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: b8:f9:f3:2c:c1:63:ba:31:14:94:9b:b4:f1:7c:5c:1f:6a:aa:62:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 3d:15:83:1c:a0:aa:53:94:ca:e1:44:44:5c:74:98:8e:4a:e5:91:ac
Fingerprint (sha256): ba:7d:f9:0e:97:fc:99:ab:34:ea:91:79:61:0c:3f:51:29:10:7e:1b:57:c2:3e:25:fc:ad:bd:5f:c0:2b:2f:68
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ozrc.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ozrc.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ozrc.com
Other certificates including the domain name ozrc.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.ozrc.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISAyHC2x5nKJ/0geFEWNWQpseHMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTMwNTE3MzhaFw0y MDA1MTMwNTE3MzhaMBcxFTATBgNVBAMTDHd3dy5venJjLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAPbkUJGeqUvfSVg0/IJIqvT370IBrZIygd8N eAyDp6y3B+lsk7MOFiQk6PAgXnra1tczN/dFLQXlP65RA5kT4gFVYoZ3VggWuSEn n4Pzd7+M/qUCzSk37B7lIra0z474VHMsmzcxPyC/o/L5kaAJbyR/hQhq1b3wf741 Bf4S5IPhfXYHnNiwpxJWgQH1nZ+I9GQtJVlgmd3H9NJMZldxWu37umxQ4dCxL12b rWiRnhlmmrr1tdUmPYbhuVzh6JYiNkYnhSmgkt+TtQugrV5JcZfniMFBopKJWSJd lXQREd277rIIZIP3nQo/DwCibcKYyf/hw1KsUpVa/j3xhiy5eZvN2+Qp64JbltBY 9oGDXXLrEepD1XmkQ2khEWrfH7IN6ht6yd4A5KfxF3xwpJzxzM7ozEu/dz+nkU13 HqCk2vH2brqXjMRiBuFYuvPHZJ2t6UOBt6kptx8yajFFOmRGNUou65M7dLfOPHkE nzi60tEypQAVnGAn8QI0YoQFCD4VCZMSIwkCauHviI/TxhVtYAA4/ZoOvy4BGUkQ izUfzR0EuvHe2/xa3XzzMA2PudJoT269mZiOqmp63xzUOHR4OJkMD7BTip1R/eyc sMWlM/RXMM/D6SAbre+fTqmVOVDfmClNkG01MqrkfAr8gQLO+EdSf0d8f3+pMpgM xdvgEwZtAgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLj58yzB Y7oxFJSbtPF8XB9qqmKgMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMd3d3Lm96cmMuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFwPTIbdQAABAMA RzBFAiEA58gMNCNbnUO8LStsMh0KdInJqHTahuQeJWvSYZEcmP4CIHVDAl1EmEt4 1OZTl99e+mna+qt+muC9vMou1IuPDF8eAHUAB7dcG+V9aP/xsMYdIxXHuuZXfFeU t2ruvGE6GmnTohwAAAFwPTIbmQAABAMARjBEAiBXOZCR8s7VF7LR8m8j6a1pL1hZ LQn63LothyT+JuPGVgIgBNPaJW2vmkZWP1gDYvVz53QRNqzbSfZg6r8MB1E5n38w DQYJKoZIhvcNAQELBQADggEBAH7ak8RFinfMVqf6P6LuB9lEOY/bfv84B0JVxaiQ PxWb5311Q0Ezbrrw6Nolswq0b8jJ9DUQsSZ0l+PVoF4F5tRr96xyitiP+sM3TDOe tD2YJykUa3GwlMnEBPzA2jrO0TLJ9U6OMR4gj5OOTATf6oKjM9Yma+2A4OaOWijl xKj/zG5UYV1sdxHxW7HhHxRL2wwvvHgqvL2rZ0pehd/BN0/iTxvV43mtsGK8jXii lTk1MUjHBe/6sW+77SrKqo+/2x2jmu5iNlu0hOHl+7i4GAU+O1ZIm/GUUOP9Buik Sv3eGMq0c15p0XCFN1VJ31Kj6GFssS64WO0L21cqHEitJwY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA9uRQkZ6pS99JWDT8gkiq 9PfvQgGtkjKB3w14DIOnrLcH6WyTsw4WJCTo8CBeetrW1zM390UtBeU/rlEDmRPi AVVihndWCBa5ISefg/N3v4z+pQLNKTfsHuUitrTPjvhUcyybNzE/IL+j8vmRoAlv JH+FCGrVvfB/vjUF/hLkg+F9dgec2LCnElaBAfWdn4j0ZC0lWWCZ3cf00kxmV3Fa 7fu6bFDh0LEvXZutaJGeGWaauvW11SY9huG5XOHoliI2RieFKaCS35O1C6CtXklx l+eIwUGikolZIl2VdBER3bvusghkg/edCj8PAKJtwpjJ/+HDUqxSlVr+PfGGLLl5 m83b5CnrgluW0Fj2gYNdcusR6kPVeaRDaSERat8fsg3qG3rJ3gDkp/EXfHCknPHM zujMS793P6eRTXceoKTa8fZuupeMxGIG4Vi688dkna3pQ4G3qSm3HzJqMUU6ZEY1 Si7rkzt0t848eQSfOLrS0TKlABWcYCfxAjRihAUIPhUJkxIjCQJq4e+Ij9PGFW1g ADj9mg6/LgEZSRCLNR/NHQS68d7b/FrdfPMwDY+50mhPbr2ZmI6qanrfHNQ4dHg4 mQwPsFOKnVH97JywxaUz9Fcwz8PpIBut759OqZU5UN+YKU2QbTUyquR8CvyBAs74 R1J/R3x/f6kymAzF2+ATBm0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272825183864511363663527843322910350952327 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 05:17:38 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 05:17:38 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ozrc.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1007230889175033039729990092705553303965129034382554862002988241520920138859914905334103143062846344743223789445586493301263700626670550227012759268578858797558440780834643659082335793819227951285238719971877816314310693572866105003113829652442175147539582777346758636961609107126329227240597939354418568047462647798658936969704662890144286187367088262814092056294339972480620783927000505236509655644160908289307923364656504519422474115003215156955437207331205464378475727690074366234287151614641223930007659277206328578787283098306877869643063835116670998800957679453295073749499891544483454268006477231221974792609943018852693663717146774405528462263978675599200765052691464291233854124307792738227044420617434830768552008284412070290291649404929904707060660794985533419156512202502006125105290630867782382896360977343554042776356462392912471436973575276699748491016531124516253707790921842252071647233197388859064779982252425401325513592703470092337899337336543822347421974310353208568977547066421505444634937775377011468142222612363148049064003456734618467596167391479715798580547130429910349992951313783518557918178731214492260664355347935385040371832224497908500965084971638102527774369591120383381870531731584995006941716743789 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b8f9f32cc163ba3114949bb4f17c5c1f6aaa62a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozrc.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001703d321b750000040300473045022100e7c80c34235b9d43bc2d2b6c321d0a7489c9a874da86e41e256bd261911c98fe02207543025d44984b78d4e65397df5efa69dafaab7e9ae0bdbcca2ed48b8f0c5f1e00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001703d321b990000040300463044022057399091f2ced517b2d1f26f23e9ad692f58592d09fadcba2d8724fe26e3c656022004d3da256daf9a46563f580362f573e7741136acdb49f660eabf0c0751399f7f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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