optiassist.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:70:85:70:bf:98:34:69:5b:bc:29:31:2e:41:2e:65:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=optiassist.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:70:85:70:bf:98:34:69:5b:bc:29:31:2e:41:2e:65:35
Serial Number (int): 307764826094348026413118199272952162051381
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:17:0b:e5:7e:8f:e0:ab:a9:82:7a:dd:7c:2a:d1:a4:6d:e8:a2:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 37:2f:2b:3b:58:ae:d3:61:a5:07:99:13:38:0c:73:c4:76:61:73:2a
Fingerprint (sha256): d5:11:25:84:23:dd:8a:29:8f:10:14:c8:8d:a6:21:28:4e:23:cd:6b:cc:dc:92:28:e7:fc:74:8f:09:b6:3d:47

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate optiassist.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for optiassist.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

optiassist.com

Other certificates including the domain name optiassist.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for optiassist.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307764826094348026413118199272952162051381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 10:43:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 10:43:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'optiassist.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 903786355976546101335327755770903216449810347088759738011701468818241043050630892079933419365733903563333807751181308320464810311681251725795387983755174474783538589912723226737905650522600378739724481188135780372054780495891774024224312127734608788230433515661902996362531421934251825929092675139841480047314947493223857971838500823476808164129236829640062078973318970701940797510404350304973184873951057406202413514103685943017753820973736508127110157128627598405512049015937237870866845498840783859680752224559078564619152663144997154425418744305418830187523446371738457525756728179087151421246681771071204161732380367930174599913000800618736398565527036176393658331762370790233542179560807372611594464446869823299262776446963235911778241395748230273591150373857456239744208643669674866842798036651760990142925279465138983085106253202692086536161057210692487574750212876601429639109076347504647812259469877594235128637181289444377790302852745727351864952896525804472767911988560256924758078826366443466318200544349466507470359224788622117659676088691168943185366726763332572829432633102010865167998556792768364972796462989078989704184172783666021575534128755338626177761235551856862317910491291129323385499074726154993132652940639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b4170be57e8fe0aba9827add7c2ad1a46de8a296
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optiassist.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001704dcfae9b000004030047304502202f0238de7aac44bb16086f6e2fff99d04a3560907aff43718e219761f477060f02210094107fecd72eef323f9a94b6f741db405a79f7f621dded5df0324482ed5b731100770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001704dcfaea500000403004830460221008bb154eb2fdfa13d208f39c93144b1d0b66108d558240c6b45af946910788ae9022100e39c50915072eea9307ac4f8af69d2447d7a622b036af656b500c0c90e465abc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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