oldsam.net
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:75:be:07:d3:e4:f6:b0:6e:51:65:78:8d:f6:43:b1:96:46 was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=oldsam.net
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:75:be:07:d3:e4:f6:b0:6e:51:65:78:8d:f6:43:b1:96:46Serial Number (int): 301402488688036477952808493253596843972166
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 84:49:a9:e8:e2:7c:8d:9c:d1:2e:d8:99:68:ee:7f:41:6d:f9:b0:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f7:71:8c:fe:a6:bb:c7:ea:be:69:60:18:ee:c8:54:ba:c7:e8:0d:6b
Fingerprint (sha256): c8:89:df:d5:31:d9:18:6f:df:cd:f7:e3:d6:bb:a3:2f:af:4c:26:9e:4a:15:c9:55:ee:35:d9:d0:14:68:82:48
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate oldsam.net
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oldsam.net
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oldsam.net
www.oldsam.net
www.oldsam.net
Other certificates including the domain name oldsam.net
(limited to 100 certificates)
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
oldsamint.oldsam.net
oldsam.net
oldsam.net
oldsam.net
oldsamint.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
oldsam.net
oldsam.net
oldsamint.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
oldsamint.oldsam.net
oldsam.net
oldsam.net
oldsam.net
oldsamint.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
oldsam.net
oldsam.net
oldsamint.oldsam.net
oldsam.net
oldsam.net
www.oldsam.net
oldsam.net
oldsam.net
Certificate
The complete raw certificate details for oldsam.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgISA3W+B9Pk9rBuUWV4jfZDsZZGMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzEwMjUwNTE1MzRaFw0x ODAxMjMwNTE1MzRaMBUxEzARBgNVBAMTCm9sZHNhbS5uZXQwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQC1kTO3BmNOun7GDr14KkDrlQ2C1L7RHFjaYP/W CecNwIyleUKXOYspzd7IG7kZ+RfyMvj6ml+WqBOcl/BPtqnJR3NgncGJeS8mK63x xXk8vnfyJXGWx9jQuzwgCCgY6rMch3fD+9oZAThOuhxwiYBnLX2lt1Moj8mQfLx+ zco6B63gr+4rXkgHRFKwtNXlT1QVi6plm+HKwQWZNSwBK8hJ9xiKS2/q6Or9IsC6 YKavEBjwPe/fM5PuWJIfa1SaLur9O7gald6Xf1m656thORGz06mA/qPtAC23WvbV a7wOT59Ig0xUMFy22UWEOZyXw9MAZ3iJvh62b0oA+2HvN3o5LHdHMjz45tEEYwot 32ChAVL3Xhmkd9xNyGlnpcoY44LXSgJ8RA49ExoT6HvJR8Bh4RCtWt9fCEFKftUh NeWco3OHZyqAEpBdWEgOn3TfnnI4pH6Jjac5rdBpUgfIk1fkEwSqS1QQXYhKFwop 1IfkrFPFuty2P0m0MTLuPL3VXGYf7Qrsa1fBlwJdjkhrsMR5ccRyg1952YF6uDMr iDUCpIRX+iujKodRJh15yuTklmydoDq6fu+rsxrrH98rG3mwf2ZOsB1HtabCHM4o q2F12yNXrzQEAdKJ5Ok8zMDxKD3T8R//xuzS+Rm7J5aiux+e4rYvBhpuvxnfYsJ8 juSAfQIDAQABo4ICGjCCAhYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSESano4nyN nNEu2Jlo7n9BbfmwlzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCm9sZHNhbS5uZXSCDnd3dy5vbGRz YW0ubmV0MIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB 1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsG AQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQg dXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3 aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRz ZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBAEA+aWaZ lFtV52j3tS9FB4+0ncb6oML+fVrElqKg1uuzXTegQ8y/yfWAJB7oy/UJBnUXD5N3 YwgIz0KLp4hJBpjhQPCiCvQj0dizWXIQhTpebDlvLU4hIv1cUq9paFwOXpUVhsyv qahCJckElY2a/HfXPU3Zy4Gj5kSgVQsY6AgOlTvVixVGS1DWYRlXikhXy58WSeD6 32Fcle9wJwVviWMFyIvWyTIVk/5e1Q1zOv8XKJWY6GQtZXYQRHVhLemfhoSyGzTC hDvH9Az9GOpTTWAaIR3IGPIQAsFPZL/a26DX7TVdLxp+kTwamrannKMV/JQ7C0hY o4Dvn5ZcEzq88q8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtZEztwZjTrp+xg69eCpA 65UNgtS+0RxY2mD/1gnnDcCMpXlClzmLKc3eyBu5GfkX8jL4+ppflqgTnJfwT7ap yUdzYJ3BiXkvJiut8cV5PL538iVxlsfY0Ls8IAgoGOqzHId3w/vaGQE4TroccImA Zy19pbdTKI/JkHy8fs3KOget4K/uK15IB0RSsLTV5U9UFYuqZZvhysEFmTUsASvI SfcYiktv6ujq/SLAumCmrxAY8D3v3zOT7liSH2tUmi7q/Tu4GpXel39ZuuerYTkR s9OpgP6j7QAtt1r21Wu8Dk+fSINMVDBcttlFhDmcl8PTAGd4ib4etm9KAPth7zd6 OSx3RzI8+ObRBGMKLd9goQFS914ZpHfcTchpZ6XKGOOC10oCfEQOPRMaE+h7yUfA YeEQrVrfXwhBSn7VITXlnKNzh2cqgBKQXVhIDp90355yOKR+iY2nOa3QaVIHyJNX 5BMEqktUEF2IShcKKdSH5KxTxbrctj9JtDEy7jy91VxmH+0K7GtXwZcCXY5Ia7DE eXHEcoNfedmBergzK4g1AqSEV/oroyqHUSYdecrk5JZsnaA6un7vq7Ma6x/fKxt5 sH9mTrAdR7WmwhzOKKthddsjV680BAHSieTpPMzA8Sg90/Ef/8bs0vkZuyeWorsf nuK2LwYabr8Z32LCfI7kgH0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301402488688036477952808493253596843972166 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-25 05:15:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-23 05:15:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oldsam.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 740729531486784754910728154918297674120108711428353399932782461602740491498546852008330321585077726338444755643960548614869236881013210407677428030151591702087221381993396885228453073682745329550434472298771129206350187456611103689807736814024864381791305759553100053524237732023702321100017357265773708663062149150485703363651900316182850295550058047091606625901461657152485858715305166727783314494795258521187088418645160051245253536190112907870481963938699427937465445333560848181853985495672862632036435275728221002655558913850843364588524726406668493960750935236883479356510143560045603747665715694377268972802399690468572210257743436615889092968571433217837997031081564784435823729498666745955974684898351016456239429433250602560675993505913254209965311448447213913889319583807896202004843996827923419823458858867278228944996678400236124858975307997430674001389369510962599592410671921566449757302547872705395057747751717991742858730352127378868668116476126667973039160334701278511353199660518264579237612153911955942206841358663630043452287956743243286425019416583065874291910515348632801504543690784522133495748769742769413603311502539883514588015315572919749116609183445934366573932111783387580576184327644351985211622588541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8449a9e8e27c8d9cd12ed89968ee7f416df9b097 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldsam.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oldsam.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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