ocugroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:ab:36:8b:2e:5c:a8:8a:0e:b8:59:61:82:f8:e5:2b:a0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ocugroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:ab:36:8b:2e:5c:a8:8a:0e:b8:59:61:82:f8:e5:2b:a0
Serial Number (int): 326898653438338613175435835059436209384352
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: af:26:d8:54:42:b9:fd:46:4f:89:97:59:73:53:e2:48:72:78:d9:65
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:d4:6c:78:c7:07:a7:05:09:e7:3e:3c:d2:39:03:61:55:2b:4f:77
Fingerprint (sha256): 32:de:f3:3d:3f:00:8f:41:57:17:0f:d1:92:bf:a1:db:ff:47:ea:66:3a:53:7e:53:ce:d9:4b:6c:15:eb:31:8c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ocugroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocugroup.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocugroup.com

Other certificates including the domain name ocugroup.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ocugroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326898653438338613175435835059436209384352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-09 19:03:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-07 19:03:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocugroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645139150881843964883595783356589489908694447394704061419673383100536878849580810543222409192470585422234366184545626923871944924951368671094792122250793367591379529662344081504206087187485289815494082178882479914743821325631308602621672935341647294596396713700034739434948332733410518518762483191592062959053616243175219464688582495702907443382608436715448807338639173591072016781550281134127404038992837361766078178932605514308842302417690473965714276131076133078918137640703884120742277944988511673560539277130949224960401982231919559606897444025310098922568775457995958611607257078678113493590792998609745977749656714846933230181450158830456809917658192811070025764713121250068133117038093039303124610662441821424785720693424389859083102798600287244989843981655205589838233110251331880932574950505552920434191774472469163288792851502393316315436042760598776926066749782749609332938790644620125333348006560203671627080029052071343260167670045228992781361300983142158922335471245566122430561547990619304695841863671207885925961223040000382326397382504124111498497866697027843754045089764189615242089705237287342366369699033790156788165287373834410776651850161448106575079801932852063843567552119486897645597856862568576181799435321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af26d85442b9fd464f8997597353e2487278d965
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocugroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169640d967500000403004630440220554ccb134cb95c7ff5bd93f9a2f4185a9f71df49eeb677a1e902b2faa6c8156d02200c40863b122196dc201c0f7b3db8f3d44f0945773e0e249e4671927cde3ce31200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169640d98680000040300473045022100c9670e953aeb8e9f5bae7f249f5f09d2b960f43dd8e4795a6754a26747b537a602205ebae79f513d67260d881bb837528362a49b90071acf8499101382442ed8786c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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