opic.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:94:f0:7f:62:8d:0d:0e:c9:1e:eb:58:4e:d3:76:c0:f4:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opic.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:94:f0:7f:62:8d:0d:0e:c9:1e:eb:58:4e:d3:76:c0:f4:96
Serial Number (int): 312018324239120399517287026483299941938326
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 97:85:ec:cf:cc:d8:8b:8c:04:81:da:a8:ad:5f:62:9e:49:0b:f1:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:c2:94:27:f8:3d:03:cd:a3:2b:49:c1:8f:0f:80:cd:fe:cd:63:2f
Fingerprint (sha256): c5:17:27:e7:95:54:75:bd:31:bc:f4:a5:21:73:d4:3a:6e:f2:a8:5d:fd:06:38:5e:50:c1:86:b4:14:fb:5b:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opic.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opic.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opic.co

Other certificates including the domain name opic.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for opic.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312018324239120399517287026483299941938326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 23:22:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:22:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opic.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852108365155634174698810424613192123954364587756347351148423768570616386803461895521513751240955697060032106771555234780406499586502351198989537461113771706686730185558513528636680771871682088609491182868674188619034997855862614298092043817932399422358103020092503845858400953366038631740010907906639531501819836821284296531453130750806033750051044725490512669867069774923841516991022602822106201073263292741190216027058657828347287590204393852976924555689589922162596366615849384973050110062705972798203525367898551648371070650332939814493815071020222675564148405467178086319990739101805920374520820156117226885370879639756030022968297535758474915862590790495538809910066314477455660189877443266292240074370428728497577971111206720884655091849283339877413897866514355974969858019280558690891295990512034026371482217842128647402635153439099248209019921883959532357000368427096609069469625584177193241721241334482930078634793041922595620498743576133332162656352912706641397838466193765245071822839988524410697915522571983388960506637020522871381396175810092462290678790984785336835746715996974768851101043723752054594108263799758849939534072360767502655231278758687578279331175058232449819137340432055948704770327490953672557220038351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9785eccfccd88b8c0481daa8ad5f629e490bf1fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opic.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a61524e7a0000040300473045022100bb7cbd2b9070ec95fee8053f0f83eef3b79ee822a97a5a083424083e9e32beaa022063fdde5f98ffd12a04e02158e0376240f03dc9e4795320c7d90a2c4f6441b3ed007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a61524c7b000004030046304402201112f8b5b7c123f4623db4925b24997409e43419db0a5afe5d956a48063ab17c02204d2a4089d1567e47916feca8f383590eae4cb525bf6a3c9edfbae6981038a6e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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