optifon.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:48:6a:b0:e1:c2:82:24:63:7f:69:ac:88:a6:15:1b:cb:df was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=optifon.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:6a:b0:e1:c2:82:24:63:7f:69:ac:88:a6:15:1b:cb:df
Serial Number (int): 285979004804341313913289135938065399532511
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:f2:d8:36:60:9f:68:8d:a3:0e:32:11:51:36:bd:a9:3e:de:25:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:8c:44:91:97:ba:e3:7d:77:2c:ed:ca:c5:a9:33:e7:85:55:7a:fc
Fingerprint (sha256): 31:9f:5e:77:0b:16:d1:c6:d6:c8:8b:07:1a:48:59:57:38:d0:01:d8:f8:f5:94:08:b2:2f:a2:69:3b:fa:66:94

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate optifon.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optifon.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

optifon.com

Other certificates including the domain name optifon.com

(limited to 100 certificates)
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni27599.cloudflaressl.com
sni149935.cloudflaressl.com
optifon.com
sni149935.cloudflaressl.com
www.optifon.com
sni149935.cloudflaressl.com
optifon.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni27599.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
www.attymo.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
www.ballgun.com
www.optifon.com
sni149935.cloudflaressl.com
dynachill.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
optifon.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
www.optifon.com
moonation.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
optifon.com
optifon.com
ergonurse.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
exampage.com
sni27599.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
47914.com
sni27599.cloudflaressl.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com
sni27599.cloudflaressl.com
fokco.com
sni149935.cloudflaressl.com
sni149935.cloudflaressl.com

Certificate

The complete raw certificate details for optifon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285979004804341313913289135938065399532511
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 15:08:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-22 15:08:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optifon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692857029617789609514794938790827745752211675456799939143675892109882691443606062559456333553496685783932655603891209535444907560645511299385984145244755121613814655165888208295328261596470874793358725938826384809355271977410026883331049840121441584595512478447281511083057963870475981123104628490769605842508966377244668790122117198305277846062946768085830809737900043126429231722531761680929963766343294373469530227729666863073578671692296714577606249638221750073125578006797477622021395110429646536490061310448957780425942617634730025154194465194195310745266931695280260839240028439154417098584416059083129093328983829885219338748943126007842705984638144445465896008508892227834962393463573121498140621356230055279074682775282753373793606735375649195862545598276987276625718120474164849925378133892801885892588974089102527679521030393754158291653066244590694265182048824373727281468615568492389400445213651344971235744099413570940683900062101262122298723141261993787622715177730579393261711315331947139083708104791589312084310465840713835210002930025515899946502420571396013302683326683436523821562113060279896891391628163235760071174001452200273994771440012772564273970458615249670632304811462717012878215474842691266150904815281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62f2d836609f688da30e32115136bda93ede2578
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optifon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001706da8933b0000040300463044022042a04f7ec9dd0e847de10c36b9f2185bd91eca0a32ac0ce0cc0c1a1f1107e9e302202cb402f77edeab8fb300ea954d9c9cc249827da174df1fb5f1740bb7186b2f2d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001706da8931c0000040300473045022100d038f1ff48a4f550bcb48ae3fae59a3274a1a72255538c5fef973a8398a8894e0220467bcecab8f47d88d03db6c66a85b3f84a7f8043af549db2460fe0c22313f886
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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