www.op1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:a0:23:b9:4b:56:d5:82:70:f1:02:48:e1:c3:cb:1e:7d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.op1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:a0:23:b9:4b:56:d5:82:70:f1:02:48:e1:c3:cb:1e:7d
Serial Number (int): 310890662966747215092856736256459513994877
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:1b:b6:c6:38:0a:30:79:d7:dc:9e:5f:72:20:6a:a5:71:be:fd:bf
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5b:3b:dd:82:cb:55:fe:74:42:6b:da:a0:5b:7a:89:66:57:dc:5c:f5
Fingerprint (sha256): a8:a3:a1:e4:1f:c6:85:35:6c:b0:5c:9a:db:e6:ef:28:cf:e7:8c:bb:1d:90:c4:94:a8:5c:ec:b7:55:97:d6:69

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.op1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.op1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.op1.com

Other certificates including the domain name op1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.op1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310890662966747215092856736256459513994877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-11 12:54:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-10 12:54:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.op1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 982539085705162294164752724252460482775515622569315954433838466511491869712716171540024154237780694765815222904247018055806651389337152778493238696628269768637256471784401050745570385728987254467641700231460486906533752963391129207735639774669302282526617373821868902020971115780295076908203814045739837360932148760701605146949723886529260303418881767911450058246129798254272096237252692822820489953558524638829268787709045456538752209334739107515311694979405488334008960432868316246143530175218639965068913199293139325787597131433444328977403012586017337960956381958813619455801998965627934007211077744558378618600622271270206227015916170527432871741628574079202279108579992109030797104078598573233795525696641835450949924023541004210755702715113668045908318730483757360806243807873053936399763644698940734838464026085344244613295177957903879348369459275424233626286744338275964990176318206863188643749119121958425658557330295090593015682975454039149736213713283676621595288930067997658385862849459982426630726557453993153899009666076446272192266695517705999288422908222000839575533033322137412818879210503588779119262005916665726904765742852444886943821316198331161455394537934330273193942292265565486267358809925937180383310273771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							481bb6c6380a3079d7dc9e5f72206aa571befdbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.op1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef53d21ef0000040300473045022100fad13882a1ddde5fdaac1c92903d80aeb6d1b5146f79627aa0e6b3f604131a6902207eeb69d2aaf7e89f2cc466897769eb33f972aec3c479ff8d1d88423345c3bd8100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef53d2231000004030047304502207a89537e3e95f6d550b2bd579035ae63379a88d046f7f832b4909ffab460b3b1022100bba718284eebd32f4733a6c5d7096be003944ba7b931c212e3a52d55e6d3f93c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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