ozcrafter.com.au

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:eb:5d:d4:f3:45:4d:fc:d7:2f:37:8a:af:b6:b5:ba:8b was issued on by Let's Encrypt.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ozcrafter.com.au

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:eb:5d:d4:f3:45:4d:fc:d7:2f:37:8a:af:b6:b5:ba:8b
Serial Number (int): 378706847797845598552466364507216602839691
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c5:5e:a4:c0:9a:5f:75:16:26:f7:01:d1:ca:c8:f1:b1:04:a7:a7:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 61:2d:96:89:58:5d:4c:f9:f1:14:26:ce:59:e7:85:0b:e8:60:1a:b2
Fingerprint (sha256): cf:42:d5:44:00:84:b8:28:cb:8c:80:76:94:62:03:9c:b9:d5:6f:e0:7c:c6:78:fc:59:4b:ff:a9:7c:5c:40:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ozcrafter.com.au

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ozcrafter.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.ozcrafter.com.au
cpanel.pcgirl.com.au
mail.ozcrafter.com.au
ozcrafter.com.au
ozcrafter.craftandsuch.com
pcgirl.com.au
pcgirl.craftandsuch.com
webdisk.ozcrafter.com.au
webdisk.pcgirl.com.au
webmail.ozcrafter.com.au
webmail.pcgirl.com.au
www.ozcrafter.com.au
www.ozcrafter.craftandsuch.com
www.pcgirl.craftandsuch.com

Other certificates including the domain name ozcrafter.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for ozcrafter.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIlLnueMg07I1Ck6tU8m
Lg+AbLJez5HQNLtxhkLugMcyuGfHEkjvz8WoheFoCzexPxWM6ssncQ/iLiwX6SG/
vDGdFTJTDHQlU2Yc6G5narXDjXYt0I6il7ZMsTnkHgq2CvpqiiFM+w2bhiAdUTDN
lRwgB59IXlBLVwEIEDIcx/r8fqtjVsRJGil8lhHCZmzMtSJuDbOgvOH4SIkREXWT
9ImET8/90o+r0OADGbYxZslyTxC6PAvjpKmIx3N673S7I+fCHNNM/lldTxamb/ew
FxZCfyrD6XrdzmXuMWSU50frOinun3uOksC4P9hyId+Qt4TMZjbPJzRIINmp41v1
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378706847797845598552466364507216602839691
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-09 05:15:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 05:15:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ozcrafter.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22790597775716807343623223038915807540313763444294511603106221783582038533694408183616525565984806274761161799877174963074199487628845466827600724207595582589136143091072155031590475972051327513590433152892656380041271437885591972710055724422365696866410831985910318581237180966354884161300412254232343796080359567705255167398425118351640733189471179081576186503005261551454918976358876269163416358276308417341996381706333541182870653754608667658160663346430336326391906353616979207382043429950745289966314893547585738908249031457074883789021309559068172215995641934687600509467873468530459292658611425288602456421879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c55ea4c09a5f751626f701d1cac8f1b104a7a774
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (341 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.ozcrafter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ozcrafter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozcrafter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ozcrafter.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcgirl.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.ozcrafter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.ozcrafter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.pcgirl.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozcrafter.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ozcrafter.craftandsuch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcgirl.craftandsuch.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f63360000001651d5337800000040300473045022001e07115d45488ee8cda6b2adece0d391b8561050f19ec3cd8bbef85238d9232022100f32b456f09d46996d1e05ad1bc5d73de6d226600bc2049d7b86fb2ffe4c03575007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001651d53396a00000403004630440220482541fa5b7f89c0f7c573b95edbacd9ca106067cde1e3b622da8b48e9ba309c022005cb7e807688bf0dd4e7f51da68abadd4ab294f09db33a32b380923172071c7b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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