opera.digital

Issued by R3

About this certificate

This digital certificate with serial number 04:48:af:47:b3:1b:93:12:09:31:0f:51:ff:88:65:ea:6a:4a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=opera.digital

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:48:af:47:b3:1b:93:12:09:31:0f:51:ff:88:65:ea:6a:4a
Serial Number (int): 373182461330423867748427288185801296996938
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:43:ee:31:31:06:55:fe:15:b2:38:1c:f5:07:7d:1a:a1:82:f8:3f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 28:6f:e8:2b:95:9f:ea:b2:ac:42:d6:3f:3a:27:cd:8d:af:ac:e7:37
Fingerprint (sha256): 43:ec:4c:d0:f2:2c:20:f7:de:56:de:f5:55:d6:a6:4e:9c:7f:ae:63:af:36:de:57:e4:72:39:9d:4d:43:e9:ed

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate opera.digital

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opera.digital

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opera.digital
www.opera.digital

Other certificates including the domain name opera.digital

(limited to 100 certificates)
opera.digital
opera.digital
opera.digital
opera.digital
opera.digital
opera.digital
www.opera.digital
www.opera.digital

Certificate

The complete raw certificate details for opera.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373182461330423867748427288185801296996938
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 17:41:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 17:41:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opera.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 795597040668253122464940353863518134262022572264599510401362416605151623698463615068102703947679177572465921824329567880004526440457194983780376482723847734047478678021283298773606047761136184473538110882715515416896410342104923533261365249783684383321525420150320234552836760791372304546385147071932736889888996449591906431400193098402387779357703417624774817291465709366964808672527352800369895759720647972726423868930014141411385298800478671899086302477219248967217990824405150613301361400482396586617122128341082705189098703226986938123822836175563727451495855274740434316302765618421389044386337030763264266401414752176989365871591315717734788056518041541834041939546332292765812863849854661045176554350481837994210356447590045623290922087696923571539169398248223068728686606463332832693615198927473678919769974562586705589950648632966973259245880549911690741979604206416480463534782257026149662319204897460175699564460409138380115048357185372105249697769875943228911907619650080495910591027582975719265357048539636192752401889460844874047602420554803560696544114561166967927125698914934951964643621204117701127094570032600168329510165318162465983981683053011892651068288313107522260123962381863281414662908829322305108267291391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6543ee31310655fe15b2381cf5077d1aa182f83f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opera.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opera.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f4f35c20500000403004730450220018c0aedef0b6e2e4a264e3e8cb2a1eec1a562e85d9aefd5fbc8517003a317f6022100ae324b2f631fc8c5813846624f975056f266537ac1d23195e7a2c0b55ab21a19007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f4f35c2880000040300463044022076fee8385d97201b25c29b18b9b3dc76aa4d28520ece783ecdeac12d30cdcf0702201642dcfb84cad1e59b39809d743752effd09892e71fa397c45011741a5fbb918
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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