ottica.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6b:48:7d:95:35:32:c2:99:9c:de:b2:b4:c6:f5:7a:e3:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ottica.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6b:48:7d:95:35:32:c2:99:9c:de:b2:b4:c6:f5:7a:e3:c2
Serial Number (int): 297843427534918819391626208517016222622658
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 46:f7:2e:d6:71:dd:1b:ad:6d:d9:ef:39:19:99:8c:0d:5a:08:0f:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:c2:ca:93:bf:03:f5:0b:15:55:6e:0e:23:15:52:38:93:47:5c:77
Fingerprint (sha256): 95:bc:39:81:69:66:b4:34:a2:78:79:76:11:5f:d9:7c:81:be:6c:42:11:1a:63:f7:43:74:7c:3c:1e:cf:43:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ottica.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ottica.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ottica.co

Other certificates including the domain name ottica.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for ottica.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5o3ewLq4kxEHHpG8R8hY
YH60y90rcNYWbzTzSQ6+zDqKbllBgjz1ZBNJAvPuuA4/REMVbcuNAbmXoX/daI46
PTekHyRFFkUYcougRpC1xGvahpeJa5Es1UnwbGRZzED8/Mh7Cvz1d/tNG3BqMtG+
PKlfqGK/YoqgCTs20gqK9b87cIex0e8oZyUuN1aI6be7VxRGUIlQqiJ6a94mEeRB
rz7630WdWF8ZJbiThZ2wU84lzV/uoJhXjQ/Pgk9zpewyeYsfDikN3jEzE74HESKM
EMyMDnHexfjVdBxv2OjbdBhOwpG5gWMjAF4OAi8iVrsMm8wsGvLgdZi2usomrcTQ
kX9l/06gHWIhbw5t2eUw26sslL32uczE5k13uKwG8ai+8cosvRNbuTqipi72wsEN
aqxdpydauiIvVMNJpcLZ+NpuAvwT1hQXynvEUyXLp37Fil3cvktVmWQdk1yBOVG1
D34sXdB83ff2P387oAcu1VTtoMiqswTaFKsJ7WK7XcO4XK5meObzQlCn4x6lkFp0
PXzpFeILavNsC4NTEGRUsQ2MhQUfd/c9V5ssGzrAyDNbjnhXT8rPj46lUYe6hkNG
qAxl+qz+kKFgEUN+dOuqA9IqlZsrtQTJVzGN/26L+mtPXf4Bv8w84tUIaBc72fcS
kYgWwTc7BZLKV/Hgx+e8LpMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297843427534918819391626208517016222622658
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 01:51:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 01:51:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ottica.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 940578993564228629003850187141174149296783077377866214455607629129095820422049390402459523630893670302514528346803712806360181675683021383811151962750546691639852656073408902331751784993218029564094235981100509595559673853156911738419882132481879108071439374928173980804076440514438883595008192312381805056083813025677585860589071107218042041875898669315310942134562444190253941312157726738171399062212525506474956697836043350017248825634516433365863136862329103275913865956494486752364928710270983090917246108477807135335844437614843549636049659066984437002681827209644674583587059185362198463350710592392226229523184627713956246917854476849690501733738101341407717386710131581549204684589003475030051518136548861751609791346200490643378227183356829027171910344039803008720090857401907448483115420474266552248518587941352433399073231350869942539244646204519789488925558429515019040115488956456990615056343936537005026894700082653391170529351924765275919931915971335297305818905303734509143479756376881481742697088828828073870006454103591431218952168978419126067008559519770650291431876790480884344203072651595967000415319524759643487908209331210313658659547398899773150411467723374520552572202342988118563398132023387037202825096851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46f72ed671dd1bad6dd9ef3919998c0d5a080f25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottica.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aece6ef67000004030047304502201350d25e5c3482c87fcaf47d65bb7a6b83854b9f6954586816310136cc1839fa022100e6b88b3876811dd9ff69e7f74e7e1aeab5524f4bd12f250ad8c54e4c48c70ae1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aece6ef36000004030047304502204ba3daeb74c774c0363e13e5c801c13e4481babb689e54023a4e4bcebe92ffcd02210097e9aad773f567088b7cb18f555e9ee10a3b0364534769250c0f56dc2565a425
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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