www.locomondo.com

Issued by R3

About this certificate

This digital certificate with serial number 04:42:a2:6a:a7:2a:27:18:1d:b9:eb:05:bb:5c:0c:7b:1d:86 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.locomondo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:42:a2:6a:a7:2a:27:18:1d:b9:eb:05:bb:5c:0c:7b:1d:86
Serial Number (int): 371123668653109171943626340068737729371526
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:57:c6:76:b8:a4:cb:5c:6f:8d:69:e0:f7:63:9c:33:b6:43:8c:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d7:49:f2:5b:84:e9:10:14:c9:77:4e:af:d0:c3:a1:88:97:be:b5:4c
Fingerprint (sha256): 2f:bd:11:86:0f:d6:1e:db:80:61:c1:74:9e:86:df:cd:dc:fc:34:48:fb:7a:df:ad:c2:54:06:25:84:ab:1c:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.locomondo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.locomondo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.locomondo.com

Other certificates including the domain name locomondo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.locomondo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 371123668653109171943626340068737729371526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 02:45:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 02:45:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.locomondo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817083086754114274973541013996287346476477488581954783600354179064939785532432058906941124077645827083343731404858225950413525013634030939638124273722690584065516600898400617113261359982955548127205526637706843160134779572769060067228896071152599361982329217154409794579909619247315873854042804411210289981095815987270337422184230917646295005655685595468669179284266672996084674886241992764731005272370833897997941352824109861095334969042027919720799540483419379235545937754354353959145332805752518717798537318279211821670128611630264483295457432788822909813873727372418444766689890061968280707758334800543839420490598492581399450891862276145296820799497635490125757621536607173234259239267884079167540746314450505124928962568625470881520872630687307286963023982923104705493113709897576632808403800265175760573184808854254395857201671565263249182752400823253116735675765745803585193246423048054082509825005587825961975494043187140394534750968949564392933012141196414606406276909592066319134590869662683807007236597528244896379224427418811564157655418178954520180839425875758553522820123940090191354575825693949595060186448578650219170052493393096314004581357653226665704337349203955017682248958634103738094896349969594238215806467807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d957c676b8a4cb5c6f8d69e0f7639c33b6438c51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.locomondo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aca70c633000004030047304502210087efa537528835125ac4f69081f34e60c2bb901361301c2c5ee2ecc19fb64dc50220633cb69c9f6678d291bb70661c746c4b9a5b12180f96f5ea6b88edb6065b9428007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aca70c66b0000040300473045022002ca5b56a97c75c3e006e02877f8a1c0d4d82d1ce2410d04ddbffcb7e2598d9c02210083a7f5c7fb747064d5d36a7bdef6f602d09acbbce410237bcc5c21fc6328672b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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