otisr3.com

Issued by R10

About this certificate

This digital certificate with serial number 03:9b:ac:18:e2:03:6a:ba:09:00:ff:d8:6e:ea:1c:59:e4:5b was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=otisr3.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:9b:ac:18:e2:03:6a:ba:09:00:ff:d8:6e:ea:1c:59:e4:5b
Serial Number (int): 314309381082521097369280855881826149459035
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:ab:06:5f:ad:a5:ea:b6:14:a7:2e:10:26:85:4a:1b:a9:9a:43:eb
AuthorityKeyId: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (sha1): 8e:0d:98:c2:3c:99:0e:1e:39:d0:6d:29:33:b6:f9:b9:e4:88:f8:86
Fingerprint (sha256): d8:ec:ea:de:b3:4c:c7:2b:c1:74:f3:b6:e2:3e:a2:23:d0:68:9d:eb:95:aa:bf:fe:3b:30:f0:cc:c7:29:a0:ac

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation information

OCSP Server: http://r10.o.lencr.org

Check the revocation status for certificate otisr3.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for otisr3.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

otisr3.com

Other certificates including the domain name otisr3.com

(limited to 100 certificates)
admin.ajh.brookhavenschools.org
admin.ajh.brookhavenschools.org
admin.mtsd-vt.org
admin.aes.uinta1.com
admin.ramaroadelementaryschool.wearecms.com
admin.ajh.brookhavenschools.org
admin.aes.uinta1.com
admin.aes.uinta1.com
admin.aes.uinta1.com
admin.uinta1.com
otisr3.com
admin.ajh.brookhavenschools.org
admin.aes.uinta1.com
admin.ajh.brookhavenschools.org
www.kerrvance.com
admin.allenbowden.org
admin.waltergbyersschool.wearecms.com
admin.ajh.brookhavenschools.org
otisr3.com
admin.aes.uinta1.com
www.copperhillshigh.org
otisr3.com
admin.aes.uinta1.com
admin.ajh.brookhavenschools.org
admin.allenbowden.org
admin.ajh.brookhavenschools.org
admin.allenbowden.org
ivinter.apluscharterschools.org
waltergbyersschool.wearecms.com
jrsr.otisr3.com
admin.aes.uinta1.com
gledhillelementary.org
admin.aes.uinta1.com
morelandpreschool.moreland.org
www.wiu.k12.pa.us
lshigh.org
www.jpthegreat.org
admin.moreland.org
assumptionfairfield.org
colpanamericano.edu.mx
es.otisr3.com
otisr3.com
admin.allenbowden.org
admin.ajh.brookhavenschools.org
admin.aes.uinta1.com
admin.ajh.brookhavenschools.org
admin.ivinter.apluscharterschools.org
otisr3.com
admin.ajh.brookhavenschools.org
admin.chsd218.org
otisr3.com
www.anderson.moreland.org
www.145innovators.com
otisr3.com
albemarleroadmiddleschool.wearecms.com
admin.allenbowden.org
otisr3.com
www.assumptionfairfield.org
allenbowden.org
admin.aes.uinta1.com

Certificate

The complete raw certificate details for otisr3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb4rbMHlchAQFgFVBxCd
8+V9eObLzHp8dNffzdhnkKNFJAAVP8FsYYVvOUinuP9HGxoL73n4Iqs/jenVda3C
9biIgxSW3mAHfQS2EA7VHubAEynanL18csbtdJYsnEPqgYIu5nWoNmsZ61QLIJOZ
es5ZxMYO/fWU6IkFOmH1OpE930aK5dQiK4woEak034MGzhmA0ms3nSuiTq+R3G6S
hq+I33jKdwvHOwTXNUo51pKw3yiAqPh0DFmzA4DrzxqdLSG9sE6x6gT3PUD9tJT0
X0EYX9huFeR/DVpXEL0Jf+RR7E7vhuq0e0xCxm72BlVmixq2SAsgXn1+DlQ+S8AB
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314309381082521097369280855881826149459035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 10:18:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-11 10:18:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'otisr3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24457768997227069910111940628822608201748068614512726554645648616839862530531261384429480472252590901587459262527767371033238438725937375788462458122858474226369043880101186907556648904712850866512214959435543532152859814954583203681118524352214466857053024583166083024472561237149024300242052478612068934284085947599391787860609703215182617644660033850692535356734403923958289742360582809384216953631585510467914030805260583095352716746900938808896195932886202652207157678642588589138789374561082603638269426064671061878329215639237026180028302839813217243449357474125042242491357708029368367661502249109562039730469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9ab065fada5eab614a72e1026854a1ba99a43eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otisr3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000190115207d80000040300473045022100bca43192a107cad969c55e6351af8c624cf673cbce41310468426dcc20fed828022053c74d1ad88361120ef01df0718f61b7b634cdaebdd20127eb2b6b6b7fbf0c50007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c000001901152089800000403004630440220053bb4c2bb24b02103b7f8597ec8edc44114ddf8cb552b6b8a4303dd0513e60302200f62d8753c85fec05f7139761a65d279b6ae5e6d177e9709d7c5af1094d45513
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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