DV SSL/TLS Certificate for movidio.co

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the movidio.co DV SSL/TLS Certificate

This certificate with serial number 06:79:45:86:22:64:76:58:04:14:45:2f:34:56:2e:1f:63:cd for movidio.co was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for movidio.co provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:79:45:86:22:64:76:58:04:14:45:2f:34:56:2e:1f:63:cd
Serial Number (int): 563940295185044605232421969340955262673869
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: 23:6e:72:19:81:54:a5:62:0a:07:1e:65:20:50:f8:8e:18:46:0d:8c
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 66:37:6f:cb:6f:09:eb:e1:39:f7:a2:30:b3:00:24:ad:60:08:3e:7f
Fingerprint (SHA-256): 88:cc:ae:b2:80:d5:d1:df:fe:8a:1a:8b:48:d1:2b:a9:24:5c:50:e2:32:84:e1:6b:5b:fd:21:17:e5:b2:47:84

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

OCSP Server: http://r11.o.lencr.org
CRL Distribution Point: http://r11.c.lencr.org/78.crl

Check the revocation status for certificate movidio.co
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for movidio.co

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for movidio.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxtqcngBATnuI+Z3oQwR
4fx+ZmanbozFxZVMQsSI8knIaQMFDrciFTDVo54NlKU3dj3/sCZ2X9viLkh4O0Fh
bOloRJqAHSsk8eD01X2QtGrWBEvKqI0YnEkek+WkHgUsQv5hCazt4eqfia2bVt1A
qpEf8zDjefi5dQ0TFkdutNAZ7odQV7OZ5vRqY8UWJfwyJJioMit9cRJQuKQkHPmD
RkecaJKyCmJcVIVVkE2q1pJpRUvcGqoMjkLztzWRZaX+KxTzqFPEM5r/6E/EVksS
sQajJl4WbKt5Uh2Juin8ppPMlVZkho1aZX7S0bid9Ka/NsiBAXP3/5/SOlKQ8RdL
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 563940295185044605232421969340955262673869
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-30 16:32:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-29 16:32:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'movidio.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24629988707744587166496601513962285445071299587300880463243490005480523568799374561705247877147921862985866747251446459644525718268237711964868283714036164551252903523821187980252886580432123385143539660612526062451734848051395218135708779772021266568850164518210431495001182356002352218878519892192871526964929851900851056477795193756842121148557571206083551834994618042282622181634009394425110494008874158191904777459306952790652667473058343912715800512686864778350690824588142950374599877966594956139368015592292668579856315040672240681452349081334543787134234057718539573559923358594607946167836761125459083086731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							236e72198154a5620a071e652050f88e18460d8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.movidio.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'movidio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/78.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ed3c4bd6e806c2a4a20057dbcb24e23801df512fedc486c5700f20ddb73e3fe00000019687c04aa600000403004830460221008cf214bc46c5b5dc415796a9a51e76fd6053d8e9a965ad7ad610d1a8d0379a83022100998634d12f8ccd57f491b5654478a9aac3ac8457c59a3f074d8d930a576ca7e9007500dddcca3495d7e11605e79532fac79ff83d1c50dfdb003a1412760a2cacbbc82a0000019687c04ae100000403004630440220609e2dbd5eba312ab5319a6389bccaafc282ec6a5f1c6efea98fbb68c8c4388d0220236e8235e0d97a2a3c947b7ae14482d067df7fe43c1c8c6008da15955c8abefa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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