ozcrafter.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:90:8c:eb:10:b3:a8:a2:35:3f:a2:51:28:1c:a9:3e:1e:d7 was issued on by Let's Encrypt.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ozcrafter.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:90:8c:eb:10:b3:a8:a2:35:3f:a2:51:28:1c:a9:3e:1e:d7
Serial Number (int): 310524831079820106912868951029267396697815
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:b3:ea:99:6b:27:e0:c5:b9:9e:fe:b2:dd:ad:8e:4a:5c:d7:60:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): aa:74:4b:a1:bf:1d:cc:21:5e:60:47:73:06:7d:ef:3c:16:aa:4f:72
Fingerprint (sha256): bf:9d:39:5c:57:2d:8a:0f:01:44:0f:1a:a2:97:28:93:0c:ad:77:85:3b:33:14:17:f1:4a:2c:8c:15:7b:4b:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ozcrafter.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ozcrafter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.craftandsuch.com
cpanel.ozcrafter.com
cpanel.pcgirl.com.au
craftandsuch.com
mail.craftandsuch.com
mail.ozcrafter.com
ozcrafter.com
ozcrafter.com.craftandsuch.com
pcgirl.com.au
pcgirl.craftandsuch.com
webdisk.craftandsuch.com
webdisk.ozcrafter.com
webdisk.pcgirl.com.au
webmail.craftandsuch.com
webmail.ozcrafter.com
webmail.pcgirl.com.au
www.craftandsuch.com
www.ozcrafter.com
www.ozcrafter.com.craftandsuch.com
www.pcgirl.craftandsuch.com

Other certificates including the domain name ozcrafter.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ozcrafter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Y/skyZx0wd6RJR93Tr
frXoRQyOyzmlIU2VXSQQGzAlg49q/L2KpclKA1VY04vykUMUsGLqJifgxIGX7ql1
vv3y6yOAXnprLxSSZ2q4b+greTUp47iNtiNb13Q+pHMvIHEztbDhdTas5rhLSbZv
ncBScFu5mTitWqRgv8Wkb+SW94yTWhHHaAjoUB2NUWvSSSig+G4BrqOJI/rqVuE5
32cErY3j6NwJtHV9wmM3yIJ40E0fXkipMoECWIoMn8KnxL4gAZJke6I0ByuXY3eN
/L49nD1Aj1UrswOPaE8UT942DHKI2hiJEA78GaxvRPFvX0NFqN3RiBzTFUJxnQ8k
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310524831079820106912868951029267396697815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-10 05:17:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-08 05:17:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ozcrafter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28738075573115520857516637553312959405144029626543902751283626447222864489612408433714467291149677301278971282928593702462383566213828511332509561175339651734423606490930711287532779879395049009588951318692027365092811234384872573407530688795720691410242629652907681621928665620841100042061660893893865457722714954205861892646913622293636762540490459151394446544399197358227894730525627548803683778268234649053939978678412602458118913668718428312645697198131082643380026665161271932726826673899361951467725763516029975456145390132835964686615918717659270978795636784984078448747392973543135968416153181494193666598011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9b3ea996b27e0c5b99efeb2ddad8e4a5cd7609f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (471 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ozcrafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ozcrafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozcrafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozcrafter.com.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgirl.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ozcrafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ozcrafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozcrafter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozcrafter.com.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcgirl.craftandsuch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016db4506bfd0000040300483046022100f3f5518db1e2dc49d6ecb60d34b4f3c324d3ef08e6c37ff0cdcd71904a97f7b0022100a1a3f45a11a3a8c62185ee9f2f9216fc95ecece1bde4173d050bf8045af78ee20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016db4506cfc000004030048304602210088f5d1c96db55b2634eed789c608b86313b69dce7b1d84b23bba4e59a5936120022100a8b4d62e193aca9870ea9df48f6f13fc6fdbd0069be2e936f3f9c5da4babe424
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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