raimondo.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d5:ba:8b:a6:a0:7c:9f:ff:44:0b:e7:db:7c:69:67:07:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=raimondo.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d5:ba:8b:a6:a0:7c:9f:ff:44:0b:e7:db:7c:69:67:07:4b
Serial Number (int): 334064963465515033125312403271891124946763
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:6b:aa:44:0a:0a:9e:0f:38:8a:33:4d:0a:ab:68:04:40:ab:c3:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 79:63:59:b4:22:de:4d:f4:25:c6:8a:a6:e7:33:d4:a0:d6:08:98:80
Fingerprint (sha256): 39:25:b6:c2:92:b4:48:5a:7d:d0:cd:10:4a:e6:b5:b4:8e:5f:9e:01:93:96:4e:4b:e2:27:23:20:39:a9:6b:42

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate raimondo.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for raimondo.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

raimondo.co

Other certificates including the domain name raimondo.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for raimondo.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu+PDHUvB3MMyUDosO5ik
85+Hfw82muEE3h+gHZjNBUiWLTnYzzoijAyYxYv2hdi0Uxtm+Ab/CGGNfFwhK78d
GT3a1SWeHQahMYCStTnE9YiB2h5o3b2z7CXqOavCeD1pQ8AiWZYXgMKk4pig0rDV
P9aSldplYofyINfR7xa+O9+Wwnds5UolpNLlS6HoV3m1kIJHXkVq7BtVoM/iKEd1
z2Ptkftt8N0PQkxNYc5vJEhKD+HZns3q2FvM+CFprjWBGv2Qme9v6b6gMfyjdH6O
6A/nzOhPxKsJZTRO791m+j/319+sT72gjTVnDkggqskNTEePJ7szwZAW093e91D7
lUg9/VNX/JYqlx1CZV3+7ViVutG/FTG5I6jclCyYM46YzMyaVg7UY9KBwRyuWsMX
NKfYMZl1EdyqPQ4M1WURpsLyqxJqCmNdlQYtjr12jIyPAwiAILUXiRscfLO9FXBY
fOOoy7tjo6pCm2Nt8UuBgvd06D79fJg5pZZaeKrOYzwUHo3iWOOxAxlyoCdmQn5/
2W04mmds2zxv9UT5ZFFW8aV2u23sxjGxPgIEok8XIAYviAudypVfGD7GyIwfBwO7
9Wf+uOcEyAY8DoUg5S+2eOm7JV3c2AkUytLpnzMtoxWmNdK4uE36nHR5NcKdBMjj
gZsU9DUcjADy7ZLGTBpHgY0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334064963465515033125312403271891124946763
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:19:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:19:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'raimondo.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766523083565484447137374510720690518314546357111842643783012973466699578501638044537120739056870977380366119856698465169942210449242063507704822720440833481766192018893362268052087703504015906115225609359669231341459980666966755751555833030522862030736274497552393684023581893858275000497844714496889334363756537597646817211945456502677190764759181577602227503152874989085980688951932613016876436661496920766476204822215434938616489948323928915913509127766331371446013435943630561504015952007141808109652419048040542595654337048825977992797052742607843851138754021083499664080765793185003255122927068076952640308973132902143420370075728070060547594696343595270685161939757082622986289245524478447172494959338325634100482719987173416859030358956454920589818607037189462727922314644856860583244704252915068622581469053019387354374673903391114476757772358711467354920184648176450947431156855934523630847592284032920897994005087143122005709773788060426386183806999392384037277956591556571120375567845488471159019124884640365400742992289259003364812877339885885562599274947931793858653200685048987701236667219905486094973925906161232748019996664870796068294078531377249441193120243976319587896951544898798958260543255632061883686161187213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de6baa440a0a9e0f388a334d0aab680440abc3e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raimondo.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3ae19de70000040300483046022100d57690f48bcd6d0e5e0614b7b0df9dc3a1f7af6070cd883511e777a04bd3eb5d02210099da2a16433d075cec5abf74c3b661486c2f3219efa3a730159a6dc27fccdf4700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3ae19dd5000004030047304502210087c071af4dc641c451b74982aebb132c885039f87558c96b0b9363c0228564b10220698e52779222272e421fe2e3cc241cd5b4d14b1ff02310badec77382c325619c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009c1dd3b20ef25f38acb1436277b399b395562aa325b66101ca5b45e30f5977fd9b0faeec19800cf5c575f78e631db546b9e30418705cd5b82e1bedafafe3e3a832e2b17163191679937ddab76f4236ea61288c7391ac6b46a28d15f24cd127f8d9b33ee98349ecf794594ed1bb15cc1969cbab8167dab14420087cd612ff248338c53932dc209f5c22123dcd00664fbf0569af35e8447a17b0e13fb406b055ae26e7bc5cc64dca1fd6fd157311d8303c120e1c9356a7580d472aa50a0b64e5b6cc4aaf9194493e2f2b67467ea64bef2382d5ac8199bcf1f096987594bd64a316f8a69f41762755a893e48005e531380731963c105be9ad3574b8d9b5bc2d0dd4