optica.africa

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:5f:35:e9:94:91:f0:65:5e:bf:4b:b9:80:88:52:fe:8c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=optica.africa

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:5f:35:e9:94:91:f0:65:5e:bf:4b:b9:80:88:52:fe:8c
Serial Number (int): 330540734869136689027004843920609147813516
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 49:80:69:4e:e8:a6:31:21:da:8b:11:de:fe:f8:7b:87:d1:01:9d:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:22:72:d3:0e:23:90:3a:db:eb:cd:18:bd:4a:70:77:10:a1:8e:2a
Fingerprint (sha256): 36:3c:90:3e:3f:27:f1:c2:fa:8e:d7:dc:7c:ae:74:8c:48:30:f6:76:98:de:e8:bb:5d:e6:9c:1b:2d:ae:12:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate optica.africa

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optica.africa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

optica.africa

Other certificates including the domain name optica.africa

(limited to 100 certificates)
www.optica.africa
care.icraft.us
cummins.iqnox.support
www.optica.africa
care.icraft.us
help.geekedoutmedia.com
support.enrichment.kids
support.mirrorfly.com
support.techbliss.in
optica.africa
care.icraft.us
soporte.holistor.com.ar
help.mayfront.com
hpe.inflowtechnologies.in
helpdesk.myprojectit.com
support.link4life.net
support.frogsystems.co.uk
ticket.optica.africa
desk.efoodmenus.com
care.icraft.us
care.icraft.us
help.privocorp.com
support.celadonconsulting.com
optica.africa
support.celadonconsulting.com
support.activedatadigital.com
www.optica.africa
support.adrenalineit.com
help.geekedoutmedia.com
care.icraft.us
desk.zandeins.com
support.adrenalineit.com
care.icraft.us
care.icraft.us
support.mirrorfly.com
support.enrichment.kids
care.icraft.us
helpdesk.myprojectit.com
care.icraft.us
support.frogsystems.co.uk
help.chicbeautybox.com
www.optica.africa
www.optica.africa
www.optica.africa
support.lenoxtravelmanagement.com
care.icraft.us
www.optica.africa
help.hospitality.rmggroup.com
care.icraft.us
help.geekedoutmedia.com
optica.africa
optica.africa
care.icraft.us
support.enrichment.kids
support.longlivelodging.com
optica.africa
optica.africa
support.enrichment.kids
care.icraft.us
support.droneupdelivery.com
care.icraft.us
support.jkdiamondsinstitute.com
support.droneupdelivery.com
soporte.holistor.com.ar
support.pillpacplus.com
helpdeskz.qx.net
care.icraft.us
care.icraft.us
optica.africa
care.icraft.us
www.optica.africa
care.icraft.us
optica.africa
desk.efoodmenus.com
support.exceedtelecom.com
onhelp.canplaycasino.com
support.optica.africa
support.exceedtelecom.com
care.icraft.us
support.wirestreamwifi.com
optica.africa
help.geekedoutmedia.com
support.lenoxtravelmanagement.com
help.privocorp.com
help.hospitality.rmggroup.com
support.frogsystems.co.uk
optica.africa
care.icraft.us
onhelp.canplaycasino.com
support.lenoxtravelmanagement.com
its.ronati.com
care.icraft.us
support.wirestreamwifi.com
ayuda.labuenacrianza.com
care.icraft.us
support.beyondaccountant.com
optica.africa
www.optica.africa
help.geekedoutmedia.com
actus.paperless-innovations.com

Certificate

The complete raw certificate details for optica.africa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP3i8Qkitfyi8aXNgPsg
DzoUiNNhhVlR73pfmyD5VutTkfmA2q3663zyajC4t3N6PWhnj+2d0HEcowJZM9VQ
fCc2JwXU6MxELG8m7cY2cfS3OBKbBmnQgj/KJsliyX0AaKKjR14mNdPIjrR2hrU7
LeLutD2xGuU4xfwE5ieYQqZr3Y5Ax9SfTCtVRA5Yn2SJvD+NWtVdz26difxhQmBP
S4OmIcn+5yAQp2+kVqUMuVnnde/lSS7dTZ4+K2L6lEDWHYOVhnime/+XmKycSFhC
wGFvHblmypHwwcGNypO48JMQ1gle77tZ7n9VPksqWLEX3aRSlufscnH+ohwKdB8Z
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330540734869136689027004843920609147813516
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-04 06:48:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 06:48:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optica.africa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24867903867892330506823212788448913049681777630470866411160593066030717231517218815264668618533496161890515439408569487416032237603059240895078713091430959809543720331124239938247462463944436042345613359304138040586045715067683825238089855380435103688035000830781497028299923103198087596866549837736140236573988213157589677341032374637477969900385473928403583711277214492481533913606998280197504324744849307389123910140749083321618343169611822484588032564412270512877160797063921089486978085086464411420479999116117207365609094357980104259674198535249224867410091708506748010831332669551753446802591644645526767343953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4980694ee8a63121da8b11defef87b87d1019d69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optica.africa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f633600000016503e8f96b0000040300473045022100e4f53d8005b0b3b093b7ce909019382071210c47e0ff647d9d008fa76a6f0bc8022020ad1892bbbbdf04d1845aa0560a0ba3a356f575a6e03ffdf1f316d69ce4b54b007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016503e8f97c0000040300483046022100dcdea135b4b1c5135ad09efef6ee4108ce8390ca982d5488a273e9d622811758022100972095fb78d719c204f76da8866a77f6e1630c9ea686fda6ba6198ff2bc6d445
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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