op1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:0c:af:81:df:30:57:0e:fc:3a:d3:da:5f:1f:28:2d:fe was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=op1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:0c:af:81:df:30:57:0e:fc:3a:d3:da:5f:1f:28:2d:fe
Serial Number (int): 282110944199471328435977500329635735940606
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 50:cd:02:5c:c1:62:9f:fa:cb:16:21:87:31:8c:c0:1a:1b:1c:ef:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a0:30:88:08:cc:7a:86:9b:4a:bf:b2:53:54:88:a4:90:5d:27:e8:0e
Fingerprint (sha256): 00:e6:97:b6:dc:80:1c:27:dc:1a:62:bd:59:24:bd:a5:2e:cd:24:32:12:17:28:78:2a:14:db:c2:b6:83:e3:e4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate op1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for op1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

op1.com

Other certificates including the domain name op1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for op1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282110944199471328435977500329635735940606
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-09 12:41:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-09 12:41:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'op1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842156089199232253871690188000672916054349286909219211436358008912077697570945005901310158077262932031459104486581172959757133629030060586473748497656324814655372503907046528929585337531531179150932034996146502479444021243052747874815432455759736391177676929047269152458696718956510875932895455260291796299897795971605741734809587063744421922659975650587062226277886920869361214237751766144757287420585848651020248820230508958708804617345061241143368143405373988975887492599899234038617967915371922517603581249020496813650023177886523327130108861616963508135104684529635113792707050122080362483224116750167597157685507412602156781474661800905946720504710353920912776648787151473979389600725192519255995169556750950452670865064181311180127252062685586813463583233349652258063892546806252278272849247389387419202392967757189369990156588898404413180602572304935117738571180242887161308931681603928092848046456022603925189918304198612035522815702906677531989257585889539874327719305838604790401772124066927084069932838595176529535313375214001814927400799403271663711910006943878036386513633306675337990416699762343827996084066885090883952232704984608887267738993224578285257000255318687337797118316683175080158126756577674517802935433287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							50cd025cc1629ffacb162187318cc01a1b1cefe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001702a2e95560000040300473045022075de65e26dc5d83e28d1a9d0c2ae1d122510db0db2f552843981d4cdd4068726022100db035dcd7676cbb0c87f0205da116ea443e0ba43424a8d2ad0d8fe9fdf2a3896007600e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e000001702a2e95420000040300473045022100e8d75269e0541c7a8fdb2e2028662c691c141783ef5ca3dd6905e050ecd628b6022075b14c321ad98be95e83fa3d0a841eef8c03c50f826e7083d804e818b483ae29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00392e8eb67468877a2b7eef5b0e3a882518b9dc0e8b3e0ace9a38a3fa05e6c7a7602155653a0453e2b53c4dfcfd05db75a7489e3be79ef1c69d6b4aad87a704ded199f4eef12d35bfe211419b9112d05f5929fa0045ada0c74350ef37959c833d6ef124ff76e764a4fb3de58f87a6856b26993fe81b71638477a7a04c5d60dcafab750ebabd8c2f923fd7688220d3b042ee676a3f3925c53552610c2b2b40663a86a3eb83294f7a0bfabbbc8b6b8c4bb0d3b727f65d44a3f0d41cbc800ef443d56de32084905fe6a86b0bee8dd814fe194fb2deaf24368928a93f1ef3e8803a2229cc9db94c0c44b17cf79affeebe53c9c62de32f0151625e7371755af3211ab5