reimerfreeman.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:72:88:80:b6:a3:d9:71:d7:74:07:7c:7a:a6:b0:62:62:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reimerfreeman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:72:88:80:b6:a3:d9:71:d7:74:07:7c:7a:a6:b0:62:62:f4
Serial Number (int): 387422776881832646665598781010673657864948
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fb:de:39:08:2e:41:0a:cf:d4:6b:15:3e:01:ce:83:41:4e:14:00:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:cf:a0:07:57:48:27:24:72:fd:be:c4:d1:c2:1e:df:43:38:fa:8c
Fingerprint (sha256): 43:91:59:c6:37:12:8d:51:e9:9e:73:18:2d:66:81:f2:1b:78:5d:ff:b4:68:19:e4:0d:62:54:49:f3:06:33:4f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reimerfreeman.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reimerfreeman.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reimerfreeman.com

Other certificates including the domain name reimerfreeman.com

(limited to 100 certificates)
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.huntchase.us
clientportal.mcgaunnschwadron.com
portal.odc-cpa.com
portal.reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.reimerfreeman.com
portal.j-bfinancial.com
sampletaxfirm.com
portal.odc-cpa.com
portal.odc-cpa.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
www.shieldfinancialaz.com
portal.j-bfinancial.com
portal.huntchase.us
portal.reimerfreeman.com
portal.j-bfinancial.com
portal.odc-cpa.com
sampletaxfirm.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.infiniumat.com
portal.reimerfreeman.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.hayestaxes.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.j-bfinancial.com
sampletaxfirm.com
www.kceatax.com
portal.j-bfinancial.com
www.fanecafinancial.com
portal.j-bfinancial.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
reimerfreeman.com
sampletaxfirm.com
clientportal.mcgaunnschwadron.com
clientportal.mcgaunnschwadron.com
portal.reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.odc-cpa.com
www.fanecafinancial.com
www.ittaxsolutions.net
portal.reimerfreeman.com
portal.hayestaxes.com
clientportal.mcgaunnschwadron.com
sampletaxfirm.com
portal.huntchase.us
portal.infiniumat.com
sampletaxfirm.com
portal.j-bfinancial.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
reimerfreeman.com
portal.j-bfinancial.com
portal.j-bfinancial.com
portal.j-bfinancial.com
sampletaxfirm.com
sampletaxfirm.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
sampletaxfirm.com
portal.odc-cpa.com
portal.odc-cpa.com
reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.hayestaxes.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.j-bfinancial.com
portal.j-bfinancial.com
portal.reimerfreeman.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.pdkentrust.com
portal.reimerfreeman.com
test-custom-domains-3.thesmartnik.com
portal.odc-cpa.com
portal.j-bfinancial.com
portal.pdkentrust.com
www.fanecafinancial.com
portal.odc-cpa.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
www.kceatax.com
www.reimerfreeman.com

Certificate

The complete raw certificate details for reimerfreeman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5i7yieNxsvaVuoHdZzjS
k6hqrzIU7Op/QwmBH67fnzBjk8vFD1ZleEd6gj1wPqnj1OIHO/wj9m3Dx0k3ZCD8
nuu+0t+hffp+dvrl50z//eNSEkzu/z4o+OamMYN6ah8aU4ZEJxdlFGK8NwDXEUbo
TkvznJ7Pn+s1D8N02sY7bfml6yJS0VhqoWw9TF0I4IQbTMj6mt/83s1nM48nrtEQ
wU6N23oxID7TqzjiW/KIXgiB31UmlKCiNgK8Q64uVfo0phrQmOk7z2VzsVkdNINv
LbPzQyHCBrID/76nuPerX8QP5AjmewU4cOjUED1mfR5CgQTyiJM7v2sTiNR/iqgg
x7nXAh25wtH9ZqRZDanlsjc38qnlG49cBh5ZNDR298iNbwcUGdx/qR8rMP0zGuMM
h4YGBc/ZZ01Q2sdbmCp1HQRL+F42AC8BWvdcPodGrC09+jzS6ZtYuD1KOmm8AvPR
GSYVEltVPA7AG8Skgi72o3gflKSzlKt4WjYgW3yX/srRy1oi/byRKeESCdLoEWCo
gZs4AjrseeiApzg7weWcjmB4vrNlG0WF5rC5sX+mfHXKq0gMRO1g1KwjQnKwyQTA
B1STwX2wmF5tMjlKP4M5ICLMQBlm26tXmrSZ0BRcDQkhTpm4t0+idihvwKFYmcga
x7ZfIuivA4hVFsVei7JzfEsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 387422776881832646665598781010673657864948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 07:01:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-14 07:01:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reimerfreeman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939066294821493548524906569170254121928662539930590858099550466359086237958311982226248705948268018660164337038380857325545148360896370616513226507351955120373460135655703375391856624881058075256184851025265126844122732794548788233158258359330695641454382432360499312296786429921493061263149514740576281392625252691027875628110170641054342166150304567276011131300213098601820856495139759150200805879385352916382388381114173990526983257387393895905751830978349776432678891699239589204231044680759436713357587669126165071820842337145276534755583175242169626328639631762713569244520732113967174435035443687823484158985073113219372982873707120856185440212150371072912524621204032917140697807216718787298167283741098160886851850915100924935947945662442045175382691294963418126948019885687688874515263015758163911354832158716860028749801557026508105876213622502192962450639234873507541050356766391760884784440162700909302714779347842810940644258148691426251166722823566228105063626352034288261891128370387807092437453689414431525379929382884805380057815339065767112593177056624119370730340052637097543779015739009318178081848105134468882091802009539338421562305238803355191808626519597912520843973052634721234176681886263085040906309696587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbde39082e410acfd46b153e01ce83414e1400f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reimerfreeman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017042b770e60000040300483046022100c3d29960eb32f23f62fdc060f5cc75f2abf768ad90bc4550a27b70686816117d022100ae184c8ce70dffa078ddd6b20482c6fb91c26bcff98a2f18f5eb21ff745d24a3007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000017042b770f0000004030046304402203e33b0f357bd6314e05338c4be1e063afd959c4a005cf9e84a2aee5142ea9a6402200f8d00fb21619b464c148d10b2a7994e62eb5b9dcb8c0c71f881177d9dc082f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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