optionpit.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ac:4d:ce:f1:8c:5b:2f:dc:da:2e:88:2a:f7:67:a8:9d:b1 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=optionpit.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ac:4d:ce:f1:8c:5b:2f:dc:da:2e:88:2a:f7:67:a8:9d:b1
Serial Number (int): 407081135905451577229303314054044357008817
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c9:c9:f8:8f:e5:b0:e7:dc:c1:3b:1c:ff:22:ad:01:28:53:5d:02:0e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e5:e8:c6:b8:07:26:87:94:d3:00:94:0d:4b:31:e6:e4:ce:f3:10:aa
Fingerprint (sha256): 06:33:68:ae:21:78:a5:03:43:f8:91:23:79:02:3c:d6:28:7c:27:5f:a9:35:0a:eb:1a:34:2d:e8:1a:e3:fe:cd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate optionpit.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optionpit.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

optionpit.com
www.optionpit.com

Other certificates including the domain name optionpit.com

(limited to 100 certificates)
vip.optionpit.com
optionpit.com
events.optionpit.com
7e5b27a3b3.nxcli.net
optionpit.com
7e5b27a3b3.nxcli.net
options.optionpit.com
7e5b27a3b3.nxcli.net
options.optionpit.com
optionpit.com
optionpit.com
7e5b27a3b3.nxcli.net
7e5b27a3b3.nxcli.net
www.optionpit.com
meeting.admiresty.us
optionpit.com
www.optionpit.com
www.optionpit.com
7e5b27a3b3.nxcli.net
optionpit.com
7e5b27a3b3.nxcli.net
7e5b27a3b3.nxcli.net
optionpit.com
options.optionpit.com
optionpit.com
7e5b27a3b3.nxcli.net
7e5b27a3b3.nxcli.net
optionpit.com
www.optionpit.com
optionpit.com
optionpit.com
optionpit.com
optionpit.com
meeting.admiresty.us
www.optionpit.com

Certificate

The complete raw certificate details for optionpit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407081135905451577229303314054044357008817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 06:09:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 06:09:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optionpit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828292834172851083315651685787758531138741793587946118448216638134456440233318223879516778614699989466556003970531870142379018195256467209538312679759759518107953995772204186985338872663236654990657620033914351212458837966040512546411639010429477457612269624945605561449029549988431688153860914798933970631906771658215750738455653340252698697456159730655259795198776405551919105614910844857718869767764750101477706621447753217317828084565835392975430900514687015924614113892093755997970963448883995757242978919055158337194884537066979979275289121416080800778149504779196291768153385155565419943932019120103672591695365931525352838818992113387706976906863182074404897136397297968994640837300477157952567476754585709009467748376844310772488361559971347553329459959341619425308823310477258740145768244052707486078108942166992894102947327869898215080872264576266906287183982951726487048353267298061281790244041577854609153937979625250006712022759776514547324242763463303567572085156898166567903284660822586776429522637137595426429308376983905603917621195661805592815338196324254523259958793524821854616928688307355886917251275289660984361591757603921899150131269218713216394459841148570857026876356568712049439773007711884947556613614141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9c9f88fe5b0e7dcc13b1cff22ad0128535d020e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optionpit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optionpit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178b050d16c0000040300473045022100f887f904ceec05f54dc1c9a82be4d51001d5a52d6ff0652bd534a3594f5222e6022021e94f88c82816e440daad0e7ed19f516121dd5c624068d137a621e3ebe064110075007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d700000178b050d187000004030046304402200fc5a5e5b293ed3428b010da0cb504ac55ea49ecda359b6a9e2ac7285e610fe802200cbe5ec4a7f9629436b263e3c3aa04af267f631de82e3eaa6da8d363495d7f3a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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