opticafe.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2d:1b:8e:bf:69:2c:61:e6:11:a1:a9:2e:5e:a4:96:45:31 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opticafe.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2d:1b:8e:bf:69:2c:61:e6:11:a1:a9:2e:5e:a4:96:45:31
Serial Number (int): 363798480582796249170612092291134139024689
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e2:6f:e9:6c:0e:c6:e2:2a:c1:70:a1:53:b7:59:a4:3b:09:62:b7:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3f:03:b1:47:d4:69:e1:75:a9:d2:c1:3b:5c:16:2b:76:bb:53:e2:32
Fingerprint (sha256): d9:e0:1d:b5:0e:fb:2c:6a:42:1f:3a:77:92:a5:7d:62:ae:65:fe:6d:e1:3d:91:e3:95:ac:ca:c7:94:73:ae:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate opticafe.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opticafe.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opticafe.com

Other certificates including the domain name opticafe.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for opticafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxgT80B45YKhqfN3xWxjy
00y2KIUsJotIJWOI9q5CJKL6Up9Vp7sGKZUiypdLIIsbcjeEb19ZudS93nDa5nk9
m9zEnrlnN4bSSpZxpn/+A4BvSZ30WhH/0vfgf22pveQlqb9JpqLD/OsPh7dSojmF
hKSTHvCzUOtybFrLiiQNuEgIb0vlyDIARlrXlELMXFQBWNrP365UTxiH+GGKKUty
wrmGnNPatZDx1b0fccSC94GiFmt7toaqMLbPp6TO1bDGy6qOT1pPVy5M8rNocsKv
g3LNsy78qtmhEsKCboNc9lb2Y+D5TBEuSaR0CKglP1ZBTx7OWSkdN2xmJRphoPzM
+rcb/I0cA8zxbPfMlbFoTy/BY7fL7YrImBOAwZvAjyOPEIKq9SWycBVbJmWSLzjJ
ydYIQcaboYQaC0zOIwEhRFiybMrLAGEqlWTtNqTr9vCj5SBUkTH5Tam6jdZEy/5K
q9UPnMnVi4pFxn3YED/QHdivvfqiJhi184lLJBZh083P/1Ab8XWuMl0Euim0eSTS
aPMx2/SXTTOf2DicAIVfdZBysDTwmYzsbMd7l8r2MzXe17GxT169nN+clJiGGNiZ
d9kK5uoiEKeCVb4j5nM0BskgFvd0t2bSvI+4MxJOFXBg1/zWtC1Wgst3HnG1tz4R
TYRjdfU3janBID6W+4+a6WMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 363798480582796249170612092291134139024689
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 03:07:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-11 03:07:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opticafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 807849007621657383957774686299332107886470043926049803754847413686906759123071329851038965198586574971632054088063628908707684906984816249947282512440270475415803561618853684138889200712370512666886716964063782968970360447313822874844861681258383666359909356126766187269360511575684807638519091711137870276054890516744846083951790488359415186209533570011488289389944063072196823170723589721811442809885235754074076605248194926223512632129723611738643356885259640543625444451385419412457956228682779492174367349373840860174276631298669081002790309737201931859678281936603438239078702933766786618114027302610461803760380413278021412163504722312562621657266160286432656518202829081285874887502145894400698984690870797907698366750300562010049390236492537923563710603004912760683600022868746816674242429638167271960735438757005523082647931654345296440038774005150077661361141578980644558289410213323250160792297350240683131807150558800804130139592259361285760206366039204513708046511902203651373950870356122173527249020257607536923066823307263052571466904184039335211890554560305790466164184754014531297118278256659368533497266711415611750678090601233217801718476819350473906982846807643150519686210226203154369928146980981598056359848291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e26fe96c0ec6e22ac170a153b759a43b0962b706
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opticafe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ef84a33630000040300473045022100bcc7818b4f7bc6a806db8f991d2d0b1794811885d7ec6b1f4211a49a7b766d9602200b4944a5c97003924dce557da1786b99f961d275e19f0f50811ae688586f6f5800750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ef84a338b000004030046304402201ba335a5475e07fae2439645d69f903b2cd99ae5432fbb51fbb8f8d5ea54bb8602205b886c085dde9e88542dc5610a4f0985430091d924da83d0204a73e8d51d9fdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004fe8bf729cdeecf2e53be42bdce006964deeae04d5e29651ab374b02016d1b321753e5300390f195f917a5be1950b4574aca29ba55b1ebb11ca28c67c388bbb04ab615dd2e3bdd2159e3ad2f2478a1f977e2c3e04d4657a1233a3885b83777c15108cf82342affd7048c0ff6a2ee4471b367811225f8987ccfb935dec17592730b75e31ce68bd50c3dbe5ca4d8a65ece3f6b1f4b9ff36d3bb1f42311138c64d4dc71b8983df3e3f26987beec1c3a2dafcb78b2e20a2b474ed03c3fa6f5ffb4d814bbeb35d1c8bcefe5d7e38c01bcf52c664f6f8b79e3ac2b0b4245bf626d1d5d42f13320cc41e06cd4738c7e2189ed5f333340081d4951a4dbde3c5812f13a52