opzionaria.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f9:79:8b:0c:4c:f9:d2:5e:8b:da:53:be:6d:0e:13:66:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opzionaria.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f9:79:8b:0c:4c:f9:d2:5e:8b:da:53:be:6d:0e:13:66:da
Serial Number (int): 346228725724835300187167749833398678677210
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:f7:75:f1:17:fa:b4:31:65:0b:4c:26:6c:15:fd:6f:13:a0:fb:dc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3a:b2:d8:48:e6:eb:f3:5f:f4:c9:cf:f0:cd:05:92:93:b4:4f:75:3a
Fingerprint (sha256): ba:57:65:0d:58:d2:a5:de:01:c7:19:c7:a2:d5:8b:d6:c1:d2:80:c1:f8:0e:3d:75:33:0b:e7:a7:c7:48:38:72

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opzionaria.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opzionaria.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opzionaria.com

Other certificates including the domain name opzionaria.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for opzionaria.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 346228725724835300187167749833398678677210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 23:14:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-24 23:14:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opzionaria.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765461724395576487714751345752811889603274767691879082363989445483658864484905570827477516921104585418648273596556193590736615800163157687872629787607288851473875750187883756320534859674103030411489905938289724406193834085224561556082621447239100293792297964772497377984973186003817200987298107104301156113704170674463436470298681498964247472763873978765930711417690210815883382726323934075292910962399357472913036614268100228582884546325682448787594110842267733264212413107244668436748302657215055965165728171696307499251342246044280031293523043965122249575285714835253874546774974932197505436173187479345386005406181895425565776697702235383799008538406235014360531683731465843697729351147276851858778389122692946893281558190353036551533678092796751917450520207329155868550554760869893951218046527659138817345761605640244832438151653830360913632659224038419439402409761652649601453182263751238084654867961895798259274654690225308173921358338565492292916412374436736090505550083567625020890398483053516191390585329560899071735939386195662053590135773661995591830313299631162864374259175797994443838439568193596312417657883790779962212967510006467543639721446118064446471936564088819686447407478391543433916931826814389080579065060033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							60f775f117fab431650b4c266c15fd6f13a0fbdc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opzionaria.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d6aeb55270000040300473045022068451c3383adf9b135ddc2efcf388142d7a2e17960134572d4d363cced57e81d022100b5bb2d627870bcec29b7aba951608bc45c6ced7a90d5d358fa2ef5fdd20dad50007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d6aeb5708000004030046304402207f0464ebb6f2089e45897c799bd5ddd1988c7c3b453a6f95f5fdc1232e971a29022022995444a865ca7eebcb7d0749640a6d15c994ac3f87967c6f45a6fc581d83a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00107139564f66ce79dce31905e99adb88522ea1b065ec9aabe190a9486705c6a504e302df8e2b6a7bd13a4f8c77b747e9f4d89b8a8a116790feeac084776f60c7bac7911284bcd20e69c7a9423a7a3b4bb4bc701b07f3308d51ec65702d68e8284fdaf207378796ca65a15ac2b08b6bb5d4a8c9ccc32ed4e6cd1e642bc2de1f2e55536d1f8ef2fab05cf209209e53a1b731a97047f81d49cdf7d835ae597b0fb7524713847e2e1fddab4ef8ea9408c5f46ddb326770504a7d431f03b358b5763154b579dfa936e9232f83325da1ce7232b8598b55c1fe563c7ee354ca318526d6f690e11bf7df12e0df3af4352d683eef1d9e6b117df59abe345e2d40b17bfc5b