oparinor.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a1:1b:36:7b:d6:40:1e:6b:7e:e1:55:e2:08:2f:24:4f:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oparinor.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a1:1b:36:7b:d6:40:1e:6b:7e:e1:55:e2:08:2f:24:4f:6f
Serial Number (int): 316158490921179438009980279208241730441071
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8a:29:fa:67:5e:31:8e:3b:03:39:a8:95:d1:66:8d:5b:27:95:62:89
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a6:8f:11:f1:62:6f:05:fb:6f:46:f4:54:3b:1c:5d:b0:78:ce:f8:e5
Fingerprint (sha256): 26:5d:4e:7f:4f:34:0c:5b:cb:9b:ff:d3:5c:36:72:f7:a9:8c:2d:9c:0a:47:ae:bf:80:f0:4a:91:60:d1:ee:df

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate oparinor.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oparinor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oparinor.com

Other certificates including the domain name oparinor.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for oparinor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FJ1eYzJeX30IIYp/aEE
ywK42Oc6iXTrivf64R5HwXfCHePEwxr+6QQn7VJz3CWK8EYH/uWpAH78XlNbeQRK
x+zMMJ7utcVjJjChoPz+qDecfFcvZ8kmeej52ZKJ40kAlpBA1X8m3M6dLxpKswVu
00DOlRsSvDOyPs6kIL9kOAWiRKbfOrHEgnuMGDkAmp0uAI52GmsKqmFx2nCQNTbB
hL+/d5TsthnBcHH8uqo0P1dnjUkhAsf7rXv2vJHUYTiFcz6vX/rVWIXEVjA03F8b
DWJTNhySW2sPl1TSWMqKLwIogEP6oeYmipLGBJ5es+zbC3+dht0gVjFrqY175hgY
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316158490921179438009980279208241730441071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 02:40:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 02:40:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oparinor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29327948744283230518066627576843602248740288974824803919742904882273875874865729720932993912003960971286850384716888113720803214558830714726567503706015280997406771128787316736937568284641038933727135310452824966882623370204660647999200877089438688720083213916317604026855100278268134230708797161933434383754167935153304999340882031834513549219320358341579532248098070316366946216121150752273430488167830378534334627520611568365383512395683661707276926374805601155564260802920781530187143104962308648232986005501163360448805062684135475757848126115873169947690519111098407626542504837461535579824069880511348333877317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a29fa675e318e3b0339a895d1668d5b27956289
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oparinor.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a877987f70000040300483046022100bdf3e0e9f2d46b93a7ee430c47149c50dcb65a1e45bb3f2a80e5499267d1378b022100d7ee9e43ae828021ee6a24b97c0eccfe0d6f9431b73bb2d62fbf750b22cdf4f40077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a877989ff00000403004830460221008d9b6afa4fa8784cd08b95c7ce52bf33d157b607822292ab0c7727f057747bbf022100e5588706d307b839ec2efbd18d585beb301d8e3caa8be156d25d8f8d6aab0f25
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00088ee89e91b2fd267b56f5f5d9fd75cab9e0f12f837bf5a107e35bfba965a413320ec884aa9fe48f717b2ae05fa360bf11799f3e20a194a274bebdb4d89a123c1b72e1d6262b2cc69d67db21ce609b4f3fe5f250a14507877a390f58b2a7bdb88825eecb192cdf3731c4292cd0a1c7e2dd60b17aa446d4eb4ea17dd97d39b6cbd66cc867bb4a4bad6af8318e9ef8367d817c811cb090400315e31cf2fa824ce4f5573444c6e5e84969e7eb682b31b4f00f8b219dc8486ebeccd1e34cd3d8173b7dac74c21d931e81c541f9e707c273accab5b9d152ed2a159e4516312e145ab70c92a64390ee5d01ffbe6cb2e377f6ca13995306d802717727e6722ccb5bcc0e