optistream.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:de:e2:fc:7c:5b:65:ae:c6:c1:80:5c:de:77:07:bd:18 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=optistream.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:de:e2:fc:7c:5b:65:ae:c6:c1:80:5c:de:77:07:bd:18
Serial Number (int): 378690259211257649900850671291255912643864
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:e6:2b:d1:e9:ad:33:42:8f:2f:93:f7:ea:7e:66:da:27:2e:7a:e8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 41:23:66:d2:b4:e1:c3:cf:31:2c:de:c5:bc:cd:28:87:e7:19:6c:dd
Fingerprint (sha256): c0:a6:e3:b2:7f:06:84:dc:45:35:b8:59:e2:fc:4a:7c:a7:96:78:f9:9a:b7:8f:b7:b0:c0:47:1e:7c:67:18:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate optistream.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optistream.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

optistream.com

Other certificates including the domain name optistream.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for optistream.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378690259211257649900850671291255912643864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 20:45:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 20:45:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optistream.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 753905178706166106813261985382127477475011445548357682562377226849859109716164246800120427020881413628525918203876283632714089805862468650604665795428790277935418743018094838876434656044286186671234383722672579836000346090697516746766412728982658730498385963801689051360324646624202216533310566289514067820162813765149845918308488394339206655664453547902213922887751998908207352122509207203923358154080828182706052773962535973268306903174500563632293471590423794688938437882644622491456150443340587220585373653482543170651800125535356813192320690552027487714947995858324139636905869283766196640070612898865828906312612225458416676525092692937807185206487575125463145495963970348062846787402486716238953375756937543899766722874102678023062808897121680699350155027026650515685294210932346075023952109253157048442301699982327031618069091329508746335130391243965941441494399503824398949801293083349374487286010374904015327125259360427486628023344833781573196375399826058219131633078845790842490238980460370073297298884488722902642870666152906708409696275420064230959879689505417230217244966641885473797071541276032283254719284330726412334825375913132685659463200113403567364480261472330906801041400790389730334113917174446278680400800313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ae62bd1e9ad33428f2f93f7ea7e66da272e7ae8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optistream.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001704ad02622000004030047304502207845c3225df957affa972b8e90da804f93680f27efc688f4d770d80132297bb20221009f933850d25daf87d0eaf0b6703c59ed35072de266eb822168fa60ae8cee6a02007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001704ad02607000004030047304502200b013cc053bbd90d39064f26181140a71649e71449fbb246d2711bb8f918a706022100bb1785d9d0c4e4ea686764704bb5bdbded0ffa0ca8e3b4cb5000a63f2e0c774b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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