www.raimondo.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8f:86:83:99:f0:35:6c:07:ad:92:6c:35:5a:44:78:ce:e3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.raimondo.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8f:86:83:99:f0:35:6c:07:ad:92:6c:35:5a:44:78:ce:e3
Serial Number (int): 310176036129538548672419183537938914397923
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: aa:72:09:38:1e:d8:19:06:fd:0d:40:24:74:1a:61:5a:64:e5:2c:b6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f1:1a:96:2a:51:d2:17:20:08:df:dd:84:ba:2e:3c:db:4e:91:f1:37
Fingerprint (sha256): 34:35:5c:9d:6f:80:bf:f2:1d:d8:ab:c3:35:a2:c6:a2:b6:f9:5b:3e:ea:0f:32:a8:5d:37:6e:bc:ed:d2:94:8d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.raimondo.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.raimondo.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.raimondo.co

Other certificates including the domain name raimondo.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.raimondo.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310176036129538548672419183537938914397923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:15:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:15:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.raimondo.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788771678343264419662586381753684238165165318820513345413742030662393615974039263426109310990785686584691020208017327818737457496076483845492042317515705939332314221941127285151173081449715829041532331484076502647847985797816086545303090495301134628493409865922102429258446689615812128573140289065067735973106937509434378828626216830765909511735435076250125555549141842244773857660943089294806503265518912850059559780560691488758707025478431203770990150759749472640362861863890412805328369822646830373584234535880927677458813729180096982731943601487828033997729818232795018900827562391730729485912522157165939781110141806574432841948002901583017505157219257826202521645921994511384528948741072446899406068763482865502100994511610081671445031629315973652967362642161835514016038517137728873932294219275181801506039667846857095511854748765753883021990036258728611754410522622644014484682060173183164926075433217194880052105706445195815094085814796635564808338203730389553586868262411344324524842817513370615998882325410889662685318942903998407881366540025640768668940518699962610316260013961347722362152506231391939401014251632511197086536205943255556619569330939783686601192756146414365756955797755656443933993794498962717671932796151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa7209381ed81906fd0d4024741a615a64e52cb6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raimondo.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3ade4eb500000403004730450220149ebb83de408dc7f0cb0b75967bd8f2599e9c298af2c0b8e1ab2edccf466d02022100a3ca0296a6568abf7fb5bf297bc0ab3c0f792fe62d012c1d8f616e607369065300750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3ade4ea50000040300463044022040ab56a90556cfe48b060b7c6809e7dac26a2620ee574d271f1edb8ed6b023aa02202c3d34b863480301cae4ba6aec00d2e2dc0e0921537aefac67cae90ea3e1fffd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0056f9d3730fab735aedee715e53c6b382ab0108a84479fa4eb4bf1f1ae7fc5999326822bd2a836a2fb1cdd4645a4716330066f2f072db78a3ce6b2acff7042b14fc5b68161576097442ed00220d6c59ec8e9bfbbfd26bbfa56b9f93c0e986d0ff827ea2603195bf15a840fec4cdcbf7551068d6e82acfdb684c70222747372cd75fdefc36ce8268ec616ef5b0f64be595dd31dce6a604a408791ddd01808ade6fd7444b8088835118f79ce1a75855b37a1a91c0328aef4748b5bacbbf0c234c1893e3f4f82a4d86eef381d1c96a11796fc5a8e8e9111ad9052993534832d2d80deaa7f31f9cba86c47389e7dfce0b750245b8d512621e7cf7a3c987360aadebb3