opic.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:94:f0:7f:62:8d:0d:0e:c9:1e:eb:58:4e:d3:76:c0:f4:96 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=opic.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:94:f0:7f:62:8d:0d:0e:c9:1e:eb:58:4e:d3:76:c0:f4:96Serial Number (int): 312018324239120399517287026483299941938326
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 97:85:ec:cf:cc:d8:8b:8c:04:81:da:a8:ad:5f:62:9e:49:0b:f1:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bb:c2:94:27:f8:3d:03:cd:a3:2b:49:c1:8f:0f:80:cd:fe:cd:63:2f
Fingerprint (sha256): c5:17:27:e7:95:54:75:bd:31:bc:f4:a5:21:73:d4:3a:6e:f2:a8:5d:fd:06:38:5e:50:c1:86:b4:14:fb:5b:11
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate opic.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for opic.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
opic.co
Other certificates including the domain name opic.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for opic.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgISA5Twf2KNDQ7JHutYTtN2wPSWMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA0MjcyMzIyMjRaFw0x OTA3MjYyMzIyMjRaMBIxEDAOBgNVBAMTB29waWMuY28wggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDQ3kmd2/QWlC3a2SyTV0e4wwchYhI/o+ki5HKPqx8Y a3R5wgUcbRBMS+ZbfznDKmtcnmw8oRtrs+lCll0cH31PxYbbuQzyCJfnGWWD7zjV KtK80ElQF3jBkecqOnviOHSkHocETEpN/aMvlh8pGhnPFoFMAyLxEWpN7rAuN2nu /TAMvU/j7tLvxuKSkFYaurYrb1C30JG1VUVgaXlMfNgWGe0n22aVOtDhPcaoMzMl iz7cOBRExptsaqpxKIF7VRq/TkmVXTcCGxJ+tddEl+RwuIwzMXzyiVL5n4flyiDc aSZ1EwOYuzSXeYclzU14STxn6C/CUs+mVmz1KM8AojIMhJbVNMUv+gDmZYe+Z1nL sqYo9tug0IlfGyYrvoxhzAD2Vj1I5oj4PsTJFzxap3AIvP4hkafUP8yC+Vr44Kc7 i9rmFEc0NW5yQQUIWx3RKNbWDJp2hbZYAaL7iN2QncBhcGJVlPmN+9XZthl6GV3r Td4xm5HeI56wl39lqej3ueBmaduAUun6KWgdRjBaAmnZnDsFldCvBQdERiv6Mdlg ljeLjYNsiiG3GPjvR41us8ZQPvvo3lx0Uq7MZ447afnq07HvFu/X9Iaahu6mIC48 q071UFutsKk7SGN3fL9an/lPzRqZ/oKvBIersMgu++iQfDDUaF+m8AkTPJ2YWuuG zwIDAQABo4ICWzCCAlcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSXhezPzNiLjASB 2qitX2KeSQvx+jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz ZW5jcnlwdC5vcmcvMBIGA1UdEQQLMAmCB29waWMuY28wTAYDVR0gBEUwQzAIBgZn gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgB0ftqDMa0z EJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWphUk56AAAEAwBHMEUCIQC7fL0r kHDslf7oBT8Pg+7zt57oIql6Wgg0JAg+njK+qgIgY/3eX5j/0SoE4CFY4DdiQPA9 yeR5UyDH2QosT2RBs+0AdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0 eAAAAWphUkx7AAAEAwBGMEQCIBES+LW3wSP0Yj20klskmXQJ5DQZ2wpa/l2VakgG OrF8AiBNKkCJ0VZ+R5Fv7Kjzg1kOrky1Jb9qPJ7fuuaYEDim6DANBgkqhkiG9w0B AQsFAAOCAQEAdL62aOR009E+ZIXR/mw0hIeEy8ACJow9mtHYTRNppVfqb9mhSdjg XU1grCpgRPXC4ssIa4L1qaHjcLY+b0+meTuWd/VLGuQS5Oy74vgN9jCkd7t32xq1 56xOTwM4auc3ZLnTdCufFOgci2m0gKxRUT6BGijMcmhehlH/bGv+5O0EWbzbCseW n7Qppx1Q/UZqAxG2WY54ZTTd91S5LZIlTdlhwEJnOBV5kHamX1M11Iaiv+mxAHIa Aw4e3sxMrrObZEG1aUQS1aMR3l49OtyWrkR011SUH5NoeG9FGcOQE4kAFVXVUn/8 tZsL/ehCMJRBjcK5FzQF3sB7npDTKGFqCg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0N5Jndv0FpQt2tksk1dH uMMHIWISP6PpIuRyj6sfGGt0ecIFHG0QTEvmW385wyprXJ5sPKEba7PpQpZdHB99 T8WG27kM8giX5xllg+841SrSvNBJUBd4wZHnKjp74jh0pB6HBExKTf2jL5YfKRoZ zxaBTAMi8RFqTe6wLjdp7v0wDL1P4+7S78bikpBWGrq2K29Qt9CRtVVFYGl5THzY FhntJ9tmlTrQ4T3GqDMzJYs+3DgURMabbGqqcSiBe1Uav05JlV03AhsSfrXXRJfk cLiMMzF88olS+Z+H5cog3GkmdRMDmLs0l3mHJc1NeEk8Z+gvwlLPplZs9SjPAKIy DISW1TTFL/oA5mWHvmdZy7KmKPbboNCJXxsmK76MYcwA9lY9SOaI+D7EyRc8Wqdw CLz+IZGn1D/Mgvla+OCnO4va5hRHNDVuckEFCFsd0SjW1gyadoW2WAGi+4jdkJ3A YXBiVZT5jfvV2bYZehld603eMZuR3iOesJd/Zano97ngZmnbgFLp+iloHUYwWgJp 2Zw7BZXQrwUHREYr+jHZYJY3i42DbIohtxj470eNbrPGUD776N5cdFKuzGeOO2n5 6tOx7xbv1/SGmobupiAuPKtO9VBbrbCpO0hjd3y/Wp/5T80amf6CrwSHq7DILvvo kHww1GhfpvAJEzydmFrrhs8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 312018324239120399517287026483299941938326 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 23:22:24 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 23:22:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opic.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 852108365155634174698810424613192123954364587756347351148423768570616386803461895521513751240955697060032106771555234780406499586502351198989537461113771706686730185558513528636680771871682088609491182868674188619034997855862614298092043817932399422358103020092503845858400953366038631740010907906639531501819836821284296531453130750806033750051044725490512669867069774923841516991022602822106201073263292741190216027058657828347287590204393852976924555689589922162596366615849384973050110062705972798203525367898551648371070650332939814493815071020222675564148405467178086319990739101805920374520820156117226885370879639756030022968297535758474915862590790495538809910066314477455660189877443266292240074370428728497577971111206720884655091849283339877413897866514355974969858019280558690891295990512034026371482217842128647402635153439099248209019921883959532357000368427096609069469625584177193241721241334482930078634793041922595620498743576133332162656352912706641397838466193765245071822839988524410697915522571983388960506637020522871381396175810092462290678790984785336835746715996974768851101043723752054594108263799758849939534072360767502655231278758687578279331175058232449819137340432055948704770327490953672557220038351 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9785eccfccd88b8c0481daa8ad5f629e490bf1fa . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opic.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016a61524e7a0000040300473045022100bb7cbd2b9070ec95fee8053f0f83eef3b79ee822a97a5a083424083e9e32beaa022063fdde5f98ffd12a04e02158e0376240f03dc9e4795320c7d90a2c4f6441b3ed007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016a61524c7b000004030046304402201112f8b5b7c123f4623db4925b24997409e43419db0a5afe5d956a48063ab17c02204d2a4089d1567e47916feca8f383590eae4cb525bf6a3c9edfbae6981038a6e8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0074beb668e474d3d13e6485d1fe6c34848784cbc002268c3d9ad1d84d1369a557ea6fd9a149d8e05d4d60ac2a6044f5c2e2cb086b82f5a9a1e370b63e6f4fa6793b9677f54b1ae412e4ecbbe2f80df630a477bb77db1ab5e7ac4e4f03386ae73764b9d3742b9f14e81c8b69b480ac51513e811a28cc72685e8651ff6c6bfee4ed0459bcdb0ac7969fb429a71d50fd466a0311b6598e786534ddf754b92d92254dd961c042673815799076a65f5335d486a2bfe9b100721a030e1edecc4caeb39b6441b5694412d5a311de5e3d3adc96ae4474d754941f9368786f4519c3901389001555d5527ffcb59b0bfde8423094418dc2b9173405dec07b9e90d328616a0a