ovemp.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:ee:df:0d:6c:b7:e5:69:ad:3c:88:98:27:2c:09:08:ba:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ovemp.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ee:df:0d:6c:b7:e5:69:ad:3c:88:98:27:2c:09:08:ba:05
Serial Number (int): 429732834602213528840232450413436177267205
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:14:81:aa:c6:88:b2:51:82:ec:43:90:3d:f2:16:03:30:3f:85:74
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bc:fb:26:98:78:12:72:4e:f9:19:56:1c:39:70:96:a4:52:f0:4a:bd
Fingerprint (sha256): f5:70:2c:1b:53:c9:44:4a:10:37:9f:43:f2:36:fd:1c:82:8f:d5:be:49:80:c7:d0:01:83:2e:ec:7c:2c:39:32

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ovemp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ovemp.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ovemp.com

Other certificates including the domain name ovemp.com

(limited to 100 certificates)
www.ovemp.com
ovemp.com
www.ovemp.com
www.ovemp.com
ovemp.com
www.ovemp.com
ovemp.com
ovemp.com

Certificate

The complete raw certificate details for ovemp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISBO7fDWy35WmtPIiYJywJCLoFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjUwMDQyMDVaFw0y
MDA0MjQwMDQyMDVaMBQxEjAQBgNVBAMTCW92ZW1wLmNvbTCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAO8du4++J5j0+jpr+FWv0txUZQwc14MpaeTtVoLJ
cUvnE0WgF/dYJKJT151se4UPVaMIvvzUme5PoPGEjjEnFPLzqXIyDpLnvNh7kwgR
qqh6s2GAy0Aj+JpvOGU7q4Ua6WNCjc57updQDkS3O28OWXOk2DU9fnS5nCNqqlWd
P8KShfA3gypi8cCi4qHCXUlgHOMgNLzB21f7SjBaUoLBhXG15iqg5xBJ8o5Yp4lL
XPCjqoNBiJdeVC3MM4aljBawL/yhnGmkdx5vhQdK8qzKqiZmuyU278GWrnYfkS8T
CpHuxkVZg3NoOAPSpmgVmheh0Gf13rBDJzpe+mz8O6C1S2RWLhlDHzjJsKZaSG2v
KrBABtWrfHLXVLHoUNAuNgfjJG+ubx13PI1oEc/RKTFGiNOF/XVoKKys5D8BksTs
9BARRffV3tlISrK8ENvH65/e/RqJq5xWsUZQPKl+7E/kE+nufw5IAb7/pLnhanPe
CJJTmj8bJcafURxncO2N5V4V6+DrWjO8wi/YNCpYyJhNyaNzIKRQVowyVXm2wD/+
Rcd7NKDNPubaMIvaMXZ4cs3h3++C+qkd16hHRL1ZEAnj7k9g94iRq2CsWx/K2nlQ
slTg/Ke4G4GKeqhJfS+HpDcb9VhZIy8JERIl77bXDRPM8WN7Op1ZV2I5rz6WB67A
skh9AgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCcUgarGiLJR
guxDkD3yFgMwP4V0MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJb3ZlbXAuY29tMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAXqdz
+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFv2lz/iwAABAMASDBGAiEA
j/plMgJFXsQsEeEV6TRdMhrloWWJ953Ndn0iLl174HsCIQCKtmvy2nJP2Us5WR8u
6YPBxhh/Tuvz091urTsarNjZNAB2ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJ
Uy3vi5BeAAABb9pc/3gAAAQDAEcwRQIhAOW1g19NQI8DpOaKHFRVmeHsNGa32f70
o6NioWE13q5iAiAVlUDdQyXu2obLQBOSMuRfyFwUxMmocmDsokLzn2P13TANBgkq
hkiG9w0BAQsFAAOCAQEAPeA0SA94tu1S7IG+kO8I4cgmZzZELVKaP7468/6qR57M
7rnhBD3Lvc/Csu1vaE1iVtRBzHxvePWxdpBgza8kn8xNQD/vX/jzoFrrG5kUkBYa
N0eZRUEgDCK+7yopkjDvXQ8lihmC4CyLMMmd1FSdE3xtJCl5Cdvr3m21vVYWk8Yn
aBNhvWsUZITBIZlT5GUbY74DPbVqZsSqlf3bGd9PZr139QWvMkxwUGMh4QSGURPR
z51awlOiniePBTY1hsmQq5ASzCFKeN606GrhWVb2m1/6J0BfkYRq9C7Ra/4J9slC
OZ46OXjI6i22ML7jzNxHvWNI8nqR5ZhyLRS4dGATGw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 429732834602213528840232450413436177267205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-25 00:42:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-24 00:42:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ovemp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 975508755219801527446780039504714567946215908208857158105668954962982655040650920035620208352451541311709298205582976481921485378102758893479902449417983513408390900677091083676785140317420759611064304724150201945957609774586663191855093992584353633463062676006065106553621267797389441151087753680940943923738604828291155569014928645347317543083291946909547568905023626435732707339736419818877707159059676511256301642253011245527144195852034129706717633957925798441781830434620287478300486427274056267450696364525179338401541544167115281883607091331493066953641884069765433060092380209347550407200544846072544761189068997199031364905920447927913921588593467138238280505088127289327749068810584036916383986045917794112649636474526288228419287034915049070276082724182597915356371818510608721811759376616447380712297928675182031564818527904081043180209866631013024816923768308600492990033259869435951379370495078099233423209487662485791275744767664874487607460310645128121835892847231842518673753871322658320587145865723261346676079818657668473935571118890355864288719425831207083175820804804531646062458818335343600778672268401757586735702052761749399973903153973511127826790753035362177579815547711044388190957679919749407022114818173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							271481aac688b25182ec43903df21603303f8574
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovemp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fda5cff8b00000403004830460221008ffa653202455ec42c11e115e9345d321ae5a16589f79dcd767d222e5d7be07b0221008ab66bf2da724fd94b39591f2ee983c1c6187f4eebf3d3dd6ead3b1aacd8d934007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fda5cff780000040300473045022100e5b5835f4d408f03a4e68a1c545599e1ec3466b7d9fef4a3a362a16135deae620220159540dd4325eeda86cb40139232e45fc85c14c4c9a87260eca242f39f63f5dd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003de034480f78b6ed52ec81be90ef08e1c8266736442d529a3fbe3af3feaa479ecceeb9e1043dcbbdcfc2b2ed6f684d6256d441cc7c6f78f5b1769060cdaf249fcc4d403fef5ff8f3a05aeb1b991490161a3747994541200c22beef2a299230ef5d0f258a1982e02c8b30c99dd4549d137c6d24297909dbebde6db5bd561693c627681361bd6b146484c1219953e4651b63be033db56a66c4aa95fddb19df4f66bd77f505af324c70506321e104865113d1cf9d5ac253a29e278f05363586c990ab9012cc214a78deb4e86ae15956f69b5ffa27405f91846af42ed16bfe09f6c942399e3a3978c8ea2db630bee3ccdc47bd6348f27a91e598722d14b87460131b