osanna.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:06:00:82:af:a5:89:c6:fd:ac:f9:ca:7f:4e:4a:88:6f:a9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=osanna.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:00:82:af:a5:89:c6:fd:ac:f9:ca:7f:4e:4a:88:6f:a9
Serial Number (int): 263379230557934947713746962466940264148905
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:00:f8:81:e2:cd:b3:ba:38:9a:f5:5f:7c:1d:21:fe:13:9b:7e:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:f2:9a:17:f7:d3:ae:ef:73:0d:46:fc:b9:fd:93:dc:e8:7d:49:d5
Fingerprint (sha256): ea:fb:88:63:73:88:cf:aa:24:5b:85:25:2d:2e:30:82:78:d4:96:80:f8:94:01:4e:e7:85:4b:c4:af:5c:9b:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate osanna.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for osanna.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

osanna.co

Other certificates including the domain name osanna.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for osanna.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgISAwYAgq+licb9rPnKf05KiG+pMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMjU2NTVaFw0x
OTEwMjYyMjU2NTVaMBQxEjAQBgNVBAMTCW9zYW5uYS5jbzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAK38U/WGoWLgzPmXEolDjc/7S72+/lpgZyXXbp3h
jRvnH4+02beQrHRDqiw3NPspqPmWkdzMVqgBYzbORA8ht7lPXbe9SlqVSVl30vt2
0rZs+rhiC2TwMaCy+0S6gkqYmf/TnkGDjZFLdtn353zSivJe7DAE1GqMKcmYTS3h
SolTzeGlj5x7X7fP3hubxYTC9nVsQxtZyHUTkhJmBRJOpT9YhKUTlo/YAUT0ul4A
utScdIeWkUA8YbM6a5SVwI5dgg7KM36WPAbopn6OqD+vgQZuowJXVXJIS74Z0+4e
jV1+VNV4tIQCkLiboAyl71NFX38/5w3RTeFgTJ2rcPCBNMixyppztY3dgh94/8bP
3lK2soJsBv1kQsunbe3gBbP/IETlECa8IeISq85zBgRLYOnyrHOzpnvr1tvbQYhW
7O0DXWqgliPCnJX6Lv1rpLcvCwxzZpu487oClUcI4kaqdnzdKgZJVmWHOSbcBn2J
4pyIKShN7ApgTT3mu/Llkkgga4+J8zli2flAtYBrDbu8nuUbXSfP3lH8XudXYtGt
mUoj1kyosQf7J/7vDh1OXBIkQYWDxNE4w1BZaQ3ymz71ZzTZHoZhIMJJyw1IdyyL
ptocnsylRmRFrI1BHyad5Mjpf0IkJ9/WpQmcr1J09fv5Q16qMTc0uZ1GeH4BviD+
yaY5AgMBAAGjggJeMIICWjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFI0A+IHizbO6
OJr1X3wdIf4Tm37hMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJb3Nhbm5hLmNvMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAb1N2
rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFsOwQIwQAABAMARzBFAiBD
n7Vj67ZADKTjPgNrgkEvFhUYYfNmLfCaayXjZoy5vAIhAL/lTPLUA6OGpfqiVzyH
bprT2CvYH9LuuZKZhWMgL3b8AHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0
5UVH9HgAAAFsOwQJTAAABAMARzBFAiBqNv53fiJEiTmnzb9msghgrXbk6vDSguPT
B/QTH1oECAIhAPteB9SPoZZhj4WGM653heKfSjnLneXeCVNh8zKFR8F2MA0GCSqG
SIb3DQEBCwUAA4IBAQAMGyoZOlCNAGMAOvG0DbiuRWlNPJiX7Gxl26SkPfdNWqby
apfn4YsiZ+q9sWxh0v27N1tuB36NGl+FEKkxfbDDCfuapLBDWwysLfYFvdCKgfe5
nvLdG8jq3oJWTZYSTDrnPkFKQE5UzrzRwd+12kIQ2x4fjTV39iv+my764EOOjmXf
VezN3MckCYVt7U9zfdRJSnpTKdo8KEI1vRvv6loSsxTOceqUaun90+ktFt7C23Cf
dwvBj4P1BmhNVyPz4TbVeFCenQyhjqWdpcuu3nNyLC8Nz8FR8YKEQkMxWBL7jBQC
Xq48jWLATdCU1sMe3tiqqBZI9mA3QxIXdT61ZGwA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263379230557934947713746962466940264148905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:56:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:56:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'osanna.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709799549885972920004772118376340471954292898346106048242806335981991015769081386941339137345739811776631534608123394617310520504794112575303003817212589689922596660003541569059660060976861933330310999170119854009394062388098620994353770490073095874116646788432950274550932497251020847846463758854794061587963095104420020536432045689134018281102346771063059686508063623949256247567216701282207752560979096963969000672688149433942442257424923901464953029376297981010096263385496758268088658488341886655674037209759229529363590183487648431928082464643971280166769002700707165149339374325124643242175847648863673949356076147263468582527624439215468344145729419285045911637698121951055070473492889038538645608468052695934879174807582689801811576721826997365482049513272346482886849180131007396282458000804610952002134273698033874954458622739571543710170540062698679736185846035791758975340369495383142798573227515578312103914857427311591080427763990168489439928547008308049794905239788568491669185338394933862513719697365480704592722272240395293557072374290692879784271074447612332236224359605653176676148735877903920087183812246492426970459895155571473925664791271696858979174090087041027366449665548908841959279405787951134614053561913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8d00f881e2cdb3ba389af55f7c1d21fe139b7ee1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osanna.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c3b0408c100000403004730450220439fb563ebb6400ca4e33e036b82412f16151861f3662df09a6b25e3668cb9bc022100bfe54cf2d403a386a5faa2573c876e9ad3d82bd81fd2eeb992998563202f76fc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b04094c000004030047304502206a36fe777e22448939a7cdbf66b20860ad76e4eaf0d282e3d307f4131f5a0408022100fb5e07d48fa196618f858633ae7785e29f4a39cb9de5de095361f3328547c176
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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