olzai.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:54:12:87:a2:37:07:bc:e5:55:e4:72:b4:1a:11:a4:40 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=olzai.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:54:12:87:a2:37:07:bc:e5:55:e4:72:b4:1a:11:a4:40
Serial Number (int): 336651012248774816775841353666511923946560
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d5:f6:f6:05:46:2c:0a:81:68:ba:ed:ae:0c:62:10:7a:2f:c9:c3:01
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:1a:76:5c:dc:02:c7:6d:45:f4:34:bf:20:6a:93:70:53:16:be:2e
Fingerprint (sha256): ce:06:c6:52:7c:10:e4:94:13:32:04:67:ca:84:fd:dc:fc:06:98:d5:5e:74:22:c4:41:31:42:77:3c:c5:53:fe

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate olzai.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for olzai.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

olzai.com

Other certificates including the domain name olzai.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for olzai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336651012248774816775841353666511923946560
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 23:17:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 23:17:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'olzai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 912831337965378661970522440220134029448085358703688956622075141155702376997620219204764059263299096627745265424918256368106438864950871788473076492382723808396182432775163335520810636652813244765938184824708562486019432815097696048795673885445204221862645770319339380987880629599269587262014578634885019576568279210867570352351797733482810696321470167736267774749253975822533954701951198860167792733305042203295587906834208595187095641554643462290686422326768559978666132173475571701333895969083956898571412848272873629431698901032192837321944301912863258049089272068616968485814673676272895104622311545992278443022202103834684528700596806352487646161144370378677586562115330017626309549160534758412025454208055525388982190296619978685673277085952816798570818576399379593781316460521130240817385702865201200455605716559094098319342707980846390010755035542304449812116539349562239690654085333500449181370211970828479745524390893217012440037414684959046433126439781507483066662437527754458218729775269557471084631389677181553930385846314153679683693595793110039492082225803491324990276192775756456647000622125720237862359974892728861306064572049028653596988335229095910779287129975243867303688294071115529113112812932068037052110814839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5f6f605462c0a8168baedae0c62107a2fc9c301
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olzai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704b5b852e00000403004630440220230dbea22a1241dfc42cf45ad57fd8242416e39fe4129df62765a39a2f55018702201c568611d8eb3b42c3a4f7e6b6f789759a171805cd6169d8cf7e903a32b011bb00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704b5b8553000004030048304602210099973f38e728c976ce47f6583295ae632a6d9e10103874cbcc1e1ff317d77ef80221009bea4e5504f555f769f1fd6c113cb03244b421848bd7c62b2f24ae9bf9d8037a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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