staging.opkey.com

Issued by R3

About this certificate

This digital certificate with serial number 03:9d:dc:4b:aa:27:81:ed:45:b9:34:33:b6:3e:dc:d0:c9:1a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=staging.opkey.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:dc:4b:aa:27:81:ed:45:b9:34:33:b6:3e:dc:d0:c9:1a
Serial Number (int): 315054012434344891677518669155169477904666
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 84:a7:45:3c:7b:52:5f:88:e7:ea:2a:67:52:c1:21:92:75:07:12:5f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 24:55:8b:42:e6:a8:85:2a:8f:10:d4:79:0f:64:5b:7b:db:9e:4c:c0
Fingerprint (sha256): a4:a9:c1:5c:a6:78:f5:ee:2e:c8:fe:cb:07:69:f1:85:7c:f2:62:5f:0d:c1:8b:58:63:a8:c4:bf:1f:a4:93:81

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate staging.opkey.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.opkey.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.opkey.com
staging.opkey.com

Other certificates including the domain name opkey.com

(limited to 100 certificates)
*.opkey.com
sugarcrm.opkey.com
idempiere.opkey.com
backup.opkey.com
*.opkey.com
itsupport.nationalable.org
idempiere.opkey.com
itsupport.nationalable.org
fergusonsupport.opkey.com
odoo.opkey.com
ls.opkey.com
support.redmop.com
*.support.opkey.com
idempiere.opkey.com
idempiere.opkey.com
helpdesk.vacorp.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
odoo.opkey.com
backup.opkey.com
support.opkey.com
odoo.opkey.com
itsupport.nationalable.org
odoo.opkey.com
*.opkey.com
fergusonsupport.opkey.com
*.sugarcrm.opkey.com
*.backup.opkey.com
*.staging.opkey.com
sugarcrm.opkey.com
opkey.com
*.helpdocs.opkey.com
*.opkey.com
www.testui.opkey.com
backup.opkey.com
openproject.opkey.com
openproject.opkey.com
ls.opkey.com
*.sugarcrm.opkey.com
backup.opkey.com
atencion.traffilog.mx
getit.saiapex.in
*.support.opkey.com
studentsupport.atpstar.com
support.opkey.com
www.account.opkey.com
*.openproject.opkey.com
getit.saiapex.in
itsupport.nationalable.org
idempiere.opkey.com
*.opkey.com
idempiere.opkey.com
opkey.com
opkey.com
getit.saiapex.in
support.ksportusa.com
support.opkey.com
pfizer.opkey.com
opkey.com
sales.miraclesmind.site
*.helpdocs.opkey.com
opkey.com
odoo.opkey.com
staging.opkey.com
backup.opkey.com
openproject.opkey.com
sugarcrm.opkey.com
openproject.opkey.com
sales.miraclesmind.site
*.openproject.opkey.com
sales.miraclesmind.site
getit.saiapex.in
support.egicat.com
sugarcrm.opkey.com
opkey.com
odoo.opkey.com
ls.opkey.com
idempiere.opkey.com
fergusonsupport.opkey.com
opkey.com
sugarcrm.opkey.com
openproject.opkey.com
support.tekxiph.com
backup.opkey.com
www.ct.opkey.com
ct.opkey.com
*.staging.opkey.com
www.testui.opkey.com
opkey.com
support.egicat.com
fergusonsupport.opkey.com
opkey.com
m.opkey.com
*.opkey.com
m.opkey.com
openproject.opkey.com
openproject.opkey.com
*.opkey.com
sales.miraclesmind.site

Certificate

The complete raw certificate details for staging.opkey.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlUjnFboxxWXfS2bDHvI
ceklZBVIJHwDoko5U1MamriPcJ5JBzZNOpgx/i0IS831Ap9fWRJ3274Sehb+TFbb
Q4dicGTuonoa7PjXixUXrmmSJicIDc9AvRjrt2ALJL8Nh2QvCR4HmZ0B9Bxut5u2
pfYNAe1n8HeVxQXlB45YNkQaEUpdz1dg5N9BZ0fqub95Qp4VIAaZuOqv4PyNf2Rq
l2HpxxzM/oJ20y6W7f/mhyM4ixgt0bCInbJuKeZI/45nm36aaT/R3TQHBIfBusYB
/YXEHjl6wctuuqf6bMxXmCC+Avd8a5idFpXpXJEqN+fOlv6dyvhlJugKFVLp3sNp
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315054012434344891677518669155169477904666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-24 01:40:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-23 01:40:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.opkey.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24532214820498667421808171310170356867452604585807175860309245285809310537128204834134961686096274817194946661168005764302770625619345268973283752493126111835025247935462721600110819799930770057072139806659411000398670520918245435009726959112282969397354780432645207706618329255990831637588339705079245487150226201301539395463927255094318786533596459866494217021234811385732124795785925579966192645255610589780482096371098540580493024754225022903273298481202044566862019637972451615037701458946992898691746363133872115991495704039315603156299695757165889135974804815878415221846144586846570130812426647774025771870621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84a7453c7b525f88e7ea2a6752c121927507125f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.opkey.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.opkey.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001836d5dc41100000403004730450220746964c65d44fe0ceef14b4ef5d7cc520645c2a8d13adf5fc74f0805685032be0221008f07b929ab9d7f8541901c305b9853c404426d46247d249382be7e537b945f2400760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001836d5dc41300000403004730450220249fe1ddc65fe96df6cb2fd2532b398bb242df01f5bb6a52424a9df4594e0faf022100fc0dfbb4150ae0e12f25344c4b7aeaf3240a09ae20721814580281dc47a16ca9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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