op1.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dd:ff:97:c4:2b:6e:ab:2c:21:54:b1:14:f9:ed:b5:36:ee was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=op1.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dd:ff:97:c4:2b:6e:ab:2c:21:54:b1:14:f9:ed:b5:36:ee
Serial Number (int): 336879002039352276261475107807398739654382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c8:7e:6a:04:94:af:7a:88:65:7c:e3:38:1b:64:46:06:30:2c:1e:68
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:d7:e7:ec:04:3a:6e:10:8b:4a:2b:47:4f:d4:b7:fd:5a:19:e1:ce
Fingerprint (sha256): cc:89:98:f5:af:04:2a:b4:42:de:12:33:5b:d0:15:80:07:6c:9d:df:03:3a:aa:fa:fe:b9:ef:92:0c:a2:fb:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate op1.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for op1.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

op1.com

Other certificates including the domain name op1.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for op1.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336879002039352276261475107807398739654382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 04:41:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 04:41:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'op1.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643120338868574230256105856883970985376653322683056140224575388722862520831224691194796482679128924824908354731249195259871504151058260467562801678029471751671926033396851298634239920058874982028546178704740464183738774921046138084678952069553552966734675653687889874399855206179727021783076095718792783339618818304893924597230521639389260580036898270839478365047640167354320218750149429349687804256606263952948275587698669398012589798849415543118504691847539470011872559766578648462459233532587159466055077484386369689835241934092326493162532045494708415288574884162881372087405253844933990079809028354300638175138327155861384947839265308884249024241855536962858322650155197641802126113763487517955607745657435470414970620253507048071320673763578685164890396477465848159556917418415267783774461471547377529968677494345506238298265652343280004751501026195042141012206128505767663819698860581903240164193868865418882296081216923368627791652154704076805791550753729617464068490620102617079984520802519400753916620446537468239368639721516488015338328896749702825230020744931113738451473550217166793971504536916042414497400756165439572844910202520835415530461688926466185697023731386897214454180610335528206695009267094214241897156765521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c87e6a0494af7a88657ce3381b644606302c1e68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'op1.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dbe7c7d61000004030046304402201538c6592be43a10aae78a45d20c10f480b124c9724e07897c62afa29485fa3c02206d651c391a77d5b37b45c0538cb3df668e7daae4a582c9c33828e568da0719530076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016dbe7c7e950000040300473045022015f3d8f2fe23821d8a3015292015f05048867a7143f478e006d40d4fa8a39d9a022100d4a6a74389035a55bd1792b5ef318fcda01861771da4346e769ed514b8534b07
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00138406d7fc0a9bc052faeab9569e445aa4811c4deb047875290d90658ad4a1f4b9217e3fb4efbb3df65185b8274eab8a071ebf3e9370d22cfa8583242513ea575dbc7aaa6a7c260f6ce949aef25609316f9643013f834432ad24117fc1b49ace24dd86f18ad158c00a27ad7245a2285a24c2ef01ff951a7531885f389981b1e2a75f8a9569a494251015ef97c837c0b438cbab4f28c1ed47d792e23d896c495919fc65ccaa1e70c360d224ee4f573c37b1cba0f6bd0bdaef21ce527177816b841598a64055896fd21ff664b6a46c7e334fbbe620a1e39d1cd16163d6b24398284671d20237afb274486f167b5557ddbbca60bebb136fa07fb61f9beb6b8e3558