occulogic.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:19:7b:8c:74:24:70:44:61:6e:c2:7b:f5:3f:69:eb:dd:e7 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=occulogic.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:19:7b:8c:74:24:70:44:61:6e:c2:7b:f5:3f:69:eb:dd:e7Serial Number (int): 270008141288992413916966940755804390415847
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: a6:4f:9d:6f:6d:b4:54:ac:da:17:09:6a:5b:84:89:f6:ac:69:96:be
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 65:b3:a5:e9:d2:e3:6c:40:1a:56:6b:92:a3:04:28:36:16:1d:64:f4
Fingerprint (sha256): be:99:85:a7:f6:a7:3f:e7:12:ad:c1:dc:c2:d9:23:dc:06:b6:1f:7a:8b:e1:86:79:37:be:74:b1:99:87:c8:cb
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate occulogic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for occulogic.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
occulogic.com
Other certificates including the domain name occulogic.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for occulogic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgISAxl7jHQkcERhbsJ79T9p693nMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTMwMDExNTJaFw0y MDAxMTEwMDExNTJaMBgxFjAUBgNVBAMTDW9jY3Vsb2dpYy5jb20wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQCom47kILdQHhOeGZEFUed4mEcRxmKIKRZC 6cjq/ZfvkgK25MpKIQhwvsfceh1zOtLxDvgSdxD/vUF1v3INUmef3nEfwHxbbGQ3 06+K6LejwEGWzCMuFgxefjJUfyoSz53raeTNb7dQk8xK8BqiBmqDlR9i2JdXtN1J YUztcO5Aw2fWoJtQsE+H2M/kdB9evMijhF2S4+M/yHuGy7iG5qPox2tR6OXyzKhS iaQi5t83rxEcq8Y40kAwEb2kbqEBmT6P4DfQkHBrBOXp29kQBi/xHqx5p+cd7KHj Ab7OdBbodoLiEHHq1jRGDM6Yvlmjky9zFXaHXAYPzMZLSlbCOSkQv9yC3Isrq5j7 7tMuhlVKINMJRO2yoPvqHktHnyIktNswUyVRtj7Xn7Un9edrKpkYpz/9O5Ifk5m3 MRJS3EnpoJBmdyzPuVEOd6pqqXQjAbpenMU9kjn0ZiVlCggV2zP4ZLZr6KUbHiiu foAma5VdTajrFc5TUC+jVcFe5x754y37eT1FWec+qxWpz6Aq/rPtUivkatP1BKT9 X1w4o+i/5FSw9rD5JpR5YKtETv0t1OLWsXkkDNoBMkIsqJHMf2nvNgClnO8L6B5K n9Tz4APiIBfjcL/3/P+9dRa/FlePQSHgjAAWzj3xwewHuBY3+O2XiOTRDsLp7KJd oZ+DdWg2owIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSmT51v bbRUrNoXCWpbhIn2rGmWvjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW9jY3Vsb2dpYy5jb20wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy APAAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3Cq/RbAAAE AwBHMEUCIF6kzvm4iovFuCL6dQeK5hI9HlUOTVPgsTwVOxpu+Q7eAiEAjHqdkFf4 Hcw/HomKame8K35Idb+p4tBfZu2CwCzHscQAdgBep3P531bA57U2SH3QSeAyepGa DIShEhKEGHWWgXFFWAAAAW3Cq/YrAAAEAwBHMEUCIEofCaF/4b/jFcRJMPdsXE0a 6vwoPLCmw1jTp8c87ElLAiEAunf6eH+RxAlj+P24RcOm6ktiiZzZoMQPOHFeYBy4 Yh0wDQYJKoZIhvcNAQELBQADggEBAB1zpC5GBrOzWCjRkGVdxpn4w9da1702YPwa z7EGYlH5xct3kLP+/Sy+0tGqtVT8krxFmFuibbNE5Bj63ecwYlfcTVAzVzkWnHTl auzSaLJWv2zuWr5T6MXDosMKnKapGJjwGCGwwRTFp9TjU/PnbgvAVAujfs9Ts9Je h5ZKbo20GrwzM/Vq25JjRyHJ6jxbJqstKik48QWbEvc9mUAupIdzVEATDPWWYdwg Btd+w5UJh6k/Jl2OZBq1n/rpUX1ZKMwWmaLx+sGDkNhRvbuF7zmG6uEPz/5HVtky 23vBdZRF2IXI37KCf4nFUDAw/WXmI5WcQR5jV0eFZSchYVLGI+g= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqJuO5CC3UB4TnhmRBVHn eJhHEcZiiCkWQunI6v2X75ICtuTKSiEIcL7H3HodczrS8Q74EncQ/71Bdb9yDVJn n95xH8B8W2xkN9Oviui3o8BBlswjLhYMXn4yVH8qEs+d62nkzW+3UJPMSvAaogZq g5UfYtiXV7TdSWFM7XDuQMNn1qCbULBPh9jP5HQfXrzIo4RdkuPjP8h7hsu4huaj 6MdrUejl8syoUomkIubfN68RHKvGONJAMBG9pG6hAZk+j+A30JBwawTl6dvZEAYv 8R6seafnHeyh4wG+znQW6HaC4hBx6tY0RgzOmL5Zo5MvcxV2h1wGD8zGS0pWwjkp EL/cgtyLK6uY++7TLoZVSiDTCUTtsqD76h5LR58iJLTbMFMlUbY+15+1J/XnayqZ GKc//TuSH5OZtzESUtxJ6aCQZncsz7lRDneqaql0IwG6XpzFPZI59GYlZQoIFdsz +GS2a+ilGx4orn6AJmuVXU2o6xXOU1Avo1XBXuce+eMt+3k9RVnnPqsVqc+gKv6z 7VIr5GrT9QSk/V9cOKPov+RUsPaw+SaUeWCrRE79LdTi1rF5JAzaATJCLKiRzH9p 7zYApZzvC+geSp/U8+AD4iAX43C/9/z/vXUWvxZXj0Eh4IwAFs498cHsB7gWN/jt l4jk0Q7C6eyiXaGfg3VoNqMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 270008141288992413916966940755804390415847 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-13 00:11:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 00:11:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'occulogic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687859195455370296026053972463665508873778296409056240969819335449100599797533957446490280621209094562191017305961475847762116641281686303063872987870373437562632100836267543005810174160601733268677059954988494177231191297097097796664392735462320891715702029511609899792269892636572770681835054444453292224120248879986574941293583422928386192689969571511739422674400484988946258018604720723892677746530207498016576321784476471652400174647428156375290731740978611453787522403820085316556914895062884351894214809766110147033266031253440005606844038856857183231363536403052189070564884548734460246237680836682789659670499549984502986210042549174263853000872859539108808300281273471168706240398384038121583209527381955585753675580644714216859108980228151462141241593484856188775332215696614461413923135176077876422486497061043885653417766214371227984135148723078502000830020116043837848108909848597008605643215870575661159975908136016535783142561607885688750345980979886887846826177608831773668670340236580668860849396107249930279074698871929548211303250476347438429738208770454673047963419994763498549080506192952602721927778569373461183618656500228541845012898989760996540443458672716189483979287068172504240254377876343511452450567843 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a64f9d6f6db454acda17096a5b8489f6ac6996be . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'occulogic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc2abf45b000004030047304502205ea4cef9b88a8bc5b822fa75078ae6123d1e550e4d53e0b13c153b1a6ef90ede0221008c7a9d9057f81dcc3f1e898a6a67bc2b7e4875bfa9e2d05f66ed82c02cc7b1c40076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc2abf62b000004030047304502204a1f09a17fe1bfe315c44930f76c5c4d1aeafc283cb0a6c358d3a7c73cec494b022100ba77fa787f91c40963f8fdb845c3a6ea4b62899cd9a0c40f38715e601cb8621d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001d73a42e4606b3b35828d190655dc699f8c3d75ad7bd3660fc1acfb1066251f9c5cb7790b3fefd2cbed2d1aab554fc92bc45985ba26db344e418fadde7306257dc4d50335739169c74e56aecd268b256bf6cee5abe53e8c5c3a2c30a9ca6a91898f01821b0c114c5a7d4e353f3e76e0bc0540ba37ecf53b3d25e87964a6e8db41abc3333f56adb92634721c9ea3c5b26ab2d2a2938f1059b12f73d99402ea487735440130cf59661dc2006d77ec3950987a93f265d8e641ab59ffae9517d5928cc1699a2f1fac18390d851bdbb85ef3986eae10fcffe4756d932db7bc1759445d885c8dfb2827f89c5503030fd65e623959c411e635747856527216152c623e8