opkey.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d8:1f:52:a8:d4:c9:70:bd:51:f4:1c:c1:d1:72:a4:6b:76 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=opkey.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d8:1f:52:a8:d4:c9:70:bd:51:f4:1c:c1:d1:72:a4:6b:76
Serial Number (int): 334879484310718706943095770902361725496182
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:65:67:ad:dd:f1:95:43:59:b9:f6:d7:61:9f:08:9e:87:55:bf:dc
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 72:74:a6:39:ec:fb:d6:33:e3:84:48:18:2a:90:ec:20:ee:45:b6:2d
Fingerprint (sha256): 7b:33:6c:34:9b:53:57:43:f6:ea:e6:f7:09:6a:2e:98:68:8c:28:2e:37:65:f5:c0:ca:58:47:c9:29:6c:f8:85

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate opkey.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opkey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opkey.com

Other certificates including the domain name opkey.com

(limited to 100 certificates)
*.opkey.com
sugarcrm.opkey.com
idempiere.opkey.com
backup.opkey.com
*.opkey.com
itsupport.nationalable.org
idempiere.opkey.com
itsupport.nationalable.org
fergusonsupport.opkey.com
odoo.opkey.com
ls.opkey.com
support.redmop.com
*.support.opkey.com
idempiere.opkey.com
idempiere.opkey.com
helpdesk.vacorp.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
odoo.opkey.com
backup.opkey.com
support.opkey.com
odoo.opkey.com
itsupport.nationalable.org
odoo.opkey.com
*.opkey.com
fergusonsupport.opkey.com
*.sugarcrm.opkey.com
*.backup.opkey.com
*.staging.opkey.com
sugarcrm.opkey.com
opkey.com
*.helpdocs.opkey.com
*.opkey.com
www.testui.opkey.com
backup.opkey.com
openproject.opkey.com
openproject.opkey.com
ls.opkey.com
*.sugarcrm.opkey.com
backup.opkey.com
atencion.traffilog.mx
getit.saiapex.in
*.support.opkey.com
studentsupport.atpstar.com
support.opkey.com
www.account.opkey.com
*.openproject.opkey.com
getit.saiapex.in
itsupport.nationalable.org
idempiere.opkey.com
*.opkey.com
idempiere.opkey.com
opkey.com
opkey.com
getit.saiapex.in
support.ksportusa.com
support.opkey.com
pfizer.opkey.com
opkey.com
sales.miraclesmind.site
*.helpdocs.opkey.com
opkey.com
odoo.opkey.com
staging.opkey.com
backup.opkey.com
openproject.opkey.com
sugarcrm.opkey.com
openproject.opkey.com
sales.miraclesmind.site
*.openproject.opkey.com
sales.miraclesmind.site
getit.saiapex.in
support.egicat.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
ls.opkey.com
idempiere.opkey.com
fergusonsupport.opkey.com
opkey.com
sugarcrm.opkey.com
openproject.opkey.com
support.tekxiph.com
backup.opkey.com
www.ct.opkey.com
ct.opkey.com
*.staging.opkey.com
www.testui.opkey.com
opkey.com
support.egicat.com
fergusonsupport.opkey.com
opkey.com
m.opkey.com
*.opkey.com
m.opkey.com
openproject.opkey.com
openproject.opkey.com
*.opkey.com
sales.miraclesmind.site

Certificate

The complete raw certificate details for opkey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tRs/dZXubSgBoem9Bvd
JTZaH82/PvfKTh6zyc+LAfW/QJFOAN9rGi+oUg0pFJFG0X53OvA0vESvvxxGZQW9
tJRjjKMihhEUE4TzvswWMsTHAggO1SHCdgM6/2QcCKkTjqA9Tzbsq7f1ii02JS6G
riJjHkvKrjNz0fEVDJXxXEFoZo4es0cQvVebcNF9jKRUNBo1Qob5KeN237xZ3CA9
COZsVmBTOSgwBS5JKDfiXq67i+H0I6FII6M5N/3fLW125LOWqDPnvKBIhIzGGhjt
brlKbAOY8oTfmhFjgLxOycVo3oUPUHFU7LLZEUFUE75BULERc1OsFYGze9LdSnS1
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334879484310718706943095770902361725496182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 07:12:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 07:12:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opkey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26614795083458863449332484016382615950737401157767159502396563213364083469630986871265429929806016853761059238521937618020912763433820649198710503034245434311338793837059183001639319832600337914202874622479555361401388227953036949032066635336881665486962718374577209449605486806185418052835417336996180357085305003953423630528553091036112697626326909925012154569433929354653419551805089732525456050985110395993970601508800188617796254433441918885430820034655937469500696390784832772809082378929816900982413033795071828630907184083905804813791011726806479848165548834018664931476452302085756459119318332624226846291433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							486567adddf1954359b9f6d7619f089e8755bfdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opkey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018ab6cc5b850000040300473045022034dd2d687b5696a6be13ebc755eb9d0ff7bfc04124f599ffd20cbc344ac5bd7f022100d9b34bb29f67cb66c5fea3fe3f438d0605cf36973fa9c1e9298d9a8fb7662505007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018ab6cc5d6c000004030046304402206bd7a56fda35217ea120cb0d66d91f0f34e0e320fbcb82a1efeef43bd76581790220403d3112aaa6daa6b0b06cbb34b86d63ab14986326893a543160e74aa7869e56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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