www.optidure.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:a5:d4:f0:ea:4e:83:45:72:b0:f3:b1:bf:b5:02:36:73:04 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.optidure.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:a5:d4:f0:ea:4e:83:45:72:b0:f3:b1:bf:b5:02:36:73:04Serial Number (int): 317766495575892307359400576330426094088964
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: c3:58:4e:77:06:73:55:b9:59:a6:d6:32:c1:36:7e:a2:ee:75:82:79
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 16:80:f5:a0:fa:c3:46:c4:cf:9a:7e:3b:d3:f4:bb:b3:b7:97:c2:bf
Fingerprint (sha256): d3:b8:81:fa:f1:eb:d1:f7:5b:88:e5:24:e6:ca:34:52:d7:3d:d1:a9:16:f4:a5:b4:e2:e8:b1:46:96:2e:9a:6a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.optidure.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.optidure.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.optidure.com
Other certificates including the domain name optidure.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.optidure.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgISA6XU8OpOg0VysPOxv7UCNnMEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEwMTIxNDAxMDRaFw0y MDAxMTAxNDAxMDRaMBsxGTAXBgNVBAMTEHd3dy5vcHRpZHVyZS5jb20wggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDA08mq3b4fGC/gtB2UyxmT5RNkz1cD j9cIX6YSQw4X+E8y4thbdUdSZE/84sSGALYOClKyxvAk9hh6/j3qWTUeH2aSNy38 LlJYD+L2vt7Sw6S9Ri/7KbBNBfyWH//Pwp7p5kLx+VeKM9BDVlFw8ZahFyQFfTgz 4m1XulDvtGVHBBUWZWEnpS6TS+4Cxiir+jIifrayqQbwvXezMGCgmigMWkqJq4Um c2PuaRCp28UQn/6ctqvZM2qxxsOmWTU6FLEyYaauvagh2ueHWE3vqUs+rxjGeuSJ x137QSMRFabGHBNy5EKQjPrEIzD6YUuxVix6nJl4bSvhhHCVZsTVPVLYe3OQKPSn CPKbMEB3TjMNZSpct1JXsWCuJYsrU9SlJzQnkG/4K7ITggDOdlDVyeva+oQQWf3o 8uOFmzSTFDhW7k7uSCExAH3Y2lFIQrmK89I2F3te1W7GG1lilPjo9WUm4B1IrAl/ OIcUeKhnfqrg75pSDRwRATPQH7VXdDdSONJjky6b7U99Ah5uiaX+FJPxVkOe/kUw +mFh7U52VZgMDMD8xa7byQJ6zswk62LkhArXEdPM/imDS6J7DG7cYLSaJmGH9u63 s2nBbU6rNZA1YVebz0aPdPbzBNeK9f0IHJL0z5h6Lv2qYFh0jznIPTF9xfke1L++ cM40TBcqxkTH7QIDAQABo4ICZDCCAmAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTD WE53BnNVuVmm1jLBNn6i7nWCeTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5vcHRpZHVyZS5j b20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQC BIH0BIHxAO8AdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAW3A fMCNAAAEAwBGMEQCID6Jv1ANAvicEdlt3nCnoIrMUJO9N34TvklKxnwXh0f6AiA7 PSv3PiwWGg/nlmbGd2uHpIRdR9f8oQMMPDVrhs2CEwB2AF6nc/nfVsDntTZIfdBJ 4DJ6kZoMhKESEoQYdZaBcUVYAAABbcB8wpIAAAQDAEcwRQIgR0JEIF3+JELnL2E6 JAO/mxST0YU3FDUAA2JyOCQfHWoCIQC7irHSgVmzm6rNp5o/IaitjF6jOSQk4B3d 6ef9iyzNqDANBgkqhkiG9w0BAQsFAAOCAQEAH6y3W5boUB0uwq3hS3jb/fGGFiMc PSVup8e6Z7EXRTygdDyrnyEXxNtX6U04tjiDsZDWXnGm/5G6XecUu6JMDOvNerzI OKF4O/xAVkomejmBZQUF3DAwZkYaIvyTD4+eo6LNImQhkyKGNAO5u0IOH35/1P1A hXlb3njShBelvvIL835GAsPkDdQ3FHoekchuO60ivpR0zYWven8DHZmAftzkFWqL 94oesBcJ1VejvJMWOmArLb27tm9Y62C3aiwxPNB3zUFhixwLb32Wg5gkr5WxsjxK 0bdVo88JQxiSSZMwaqyyv5XKJtzmDVXMmqTxhifQYY6R5/BUtUIeYU+Mmw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwNPJqt2+Hxgv4LQdlMsZ k+UTZM9XA4/XCF+mEkMOF/hPMuLYW3VHUmRP/OLEhgC2DgpSssbwJPYYev496lk1 Hh9mkjct/C5SWA/i9r7e0sOkvUYv+ymwTQX8lh//z8Ke6eZC8flXijPQQ1ZRcPGW oRckBX04M+JtV7pQ77RlRwQVFmVhJ6Uuk0vuAsYoq/oyIn62sqkG8L13szBgoJoo DFpKiauFJnNj7mkQqdvFEJ/+nLar2TNqscbDplk1OhSxMmGmrr2oIdrnh1hN76lL Pq8Yxnrkicdd+0EjERWmxhwTcuRCkIz6xCMw+mFLsVYsepyZeG0r4YRwlWbE1T1S 2HtzkCj0pwjymzBAd04zDWUqXLdSV7FgriWLK1PUpSc0J5Bv+CuyE4IAznZQ1cnr 2vqEEFn96PLjhZs0kxQ4Vu5O7kghMQB92NpRSEK5ivPSNhd7XtVuxhtZYpT46PVl JuAdSKwJfziHFHioZ36q4O+aUg0cEQEz0B+1V3Q3UjjSY5Mum+1PfQIeboml/hST 8VZDnv5FMPphYe1OdlWYDAzA/MWu28kCes7MJOti5IQK1xHTzP4pg0uiewxu3GC0 miZhh/but7NpwW1OqzWQNWFXm89Gj3T28wTXivX9CByS9M+Yei79qmBYdI85yD0x fcX5HtS/vnDONEwXKsZEx+0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 317766495575892307359400576330426094088964 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-12 14:01:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 14:01:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.optidure.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 786666734078938809647579353788389444364538933930505898760249204857858057097842987581088718345106433328485060122642749221403212475854714916267813501429810483718739412271469906002736546325601322299683537328230178729671680142332052176137912739625555807086098682848043201169822048243360142353412675726208532394762277140184942201993250021736347026730814041503115425662706233132357536473035776925989122659939683786305028422407364439398778355012650228324138801226179018795587195580685381729775711205095338889711866146414897861297561331434943305523799062714847889906106286587198150060619894739327854158314787983488726607722327546382042079916721510013633715581857741783200777409506858123799226581725129514452108231862511900937568088238055468552371098061817252249083301488574131618274295032198368782934558491881665604340895067152902213345652874777351977219422398155329769236928240729378902950312589124698400379279447794155197141235686995231996517883358098226015315393173567975770288353580924245328787254716343772987921414107220767006725307816801074318287253227006210041826236644773086658541722290201785248801174972618026069076433756530347233756614013292917772847254992835839421678017155726026055674240712009941011322141966046505624013013043181 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c3584e77067355b959a6d632c1367ea2ee758279 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optidure.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016dc07cc08d000004030046304402203e89bf500d02f89c11d96dde70a7a08acc5093bd377e13be494ac67c178747fa02203b3d2bf73e2c161a0fe79666c6776b87a4845d47d7fca1030c3c356b86cd82130076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dc07cc29200000403004730450220474244205dfe2442e72f613a2403bf9b1493d1853714350003627238241f1d6a022100bb8ab1d28159b39baacda79a3f21a8ad8c5ea3392424e01ddde9e7fd8b2ccda8 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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