www.reimerfreeman.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:cc:ac:d2:d2:db:15:61:93:09:be:bb:fb:ea:a3:9c:b9:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.reimerfreeman.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:cc:ac:d2:d2:db:15:61:93:09:be:bb:fb:ea:a3:9c:b9:79
Serial Number (int): 418096468453191332479818531506365050698105
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:7e:b5:e6:a3:50:84:27:98:bd:86:df:84:40:e5:c9:38:9a:f8:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 31:ef:53:79:4f:96:f2:b5:54:de:69:5a:38:6b:ba:7e:67:a0:e0:8e
Fingerprint (sha256): 5e:1c:11:97:10:f4:ca:74:68:9e:5d:80:df:9a:dc:f8:92:2d:6e:9a:0e:ad:4d:f0:42:0a:f4:f4:24:c4:4b:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.reimerfreeman.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.reimerfreeman.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.reimerfreeman.com

Other certificates including the domain name reimerfreeman.com

(limited to 100 certificates)
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.huntchase.us
clientportal.mcgaunnschwadron.com
portal.odc-cpa.com
portal.reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.reimerfreeman.com
portal.j-bfinancial.com
sampletaxfirm.com
portal.odc-cpa.com
portal.odc-cpa.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
www.shieldfinancialaz.com
portal.j-bfinancial.com
portal.huntchase.us
portal.reimerfreeman.com
portal.j-bfinancial.com
portal.odc-cpa.com
sampletaxfirm.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.infiniumat.com
portal.reimerfreeman.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.hayestaxes.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.j-bfinancial.com
sampletaxfirm.com
www.kceatax.com
portal.j-bfinancial.com
www.fanecafinancial.com
portal.j-bfinancial.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
reimerfreeman.com
sampletaxfirm.com
clientportal.mcgaunnschwadron.com
clientportal.mcgaunnschwadron.com
portal.reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.odc-cpa.com
www.fanecafinancial.com
www.ittaxsolutions.net
portal.reimerfreeman.com
portal.hayestaxes.com
clientportal.mcgaunnschwadron.com
sampletaxfirm.com
portal.huntchase.us
portal.infiniumat.com
sampletaxfirm.com
portal.j-bfinancial.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
sampletaxfirm.com
reimerfreeman.com
portal.j-bfinancial.com
portal.j-bfinancial.com
portal.j-bfinancial.com
sampletaxfirm.com
sampletaxfirm.com
portal.reimerfreeman.com
sampletaxfirm.com
portal.j-bfinancial.com
sampletaxfirm.com
portal.odc-cpa.com
portal.odc-cpa.com
reimerfreeman.com
clientportal.mcgaunnschwadron.com
portal.hayestaxes.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.j-bfinancial.com
portal.j-bfinancial.com
portal.reimerfreeman.com
www.reimerfreeman.com
portal.reimerfreeman.com
portal.pdkentrust.com
portal.reimerfreeman.com
test-custom-domains-3.thesmartnik.com
portal.odc-cpa.com
portal.j-bfinancial.com
portal.pdkentrust.com
www.fanecafinancial.com
portal.odc-cpa.com
sampletaxfirm.com
portal.reimerfreeman.com
portal.reimerfreeman.com
www.kceatax.com
www.reimerfreeman.com

Certificate

The complete raw certificate details for www.reimerfreeman.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418096468453191332479818531506365050698105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-17 06:02:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-15 06:02:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.reimerfreeman.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 723695297231336477771717215713216373710774790816523386469250835739766388691206804689273314253634352342132301802529896107950169637725717624276206949925099285776876953857546874608792046100824882899633582955817637673011685873126861639079200768371291465641718919144257905293020146592079142182164994058633768937678123997197011508283416681248728490099294365074476534737478208176770249038090557599216667312888906198640308574316361339310466115747517235312838533206626887941289286820023935296695720521241095934549727874473630625835770514567546328048075569314803832216945026473301365760382534439951830834610867835922818652573523728167894168024453105807629386274738642064042994051016899715641061627557121334797199956736078463744256126248388655722877274344280188909560079370997686528288011291894998126178072736046248318311045077546930657365312331072663337782487013717865811285513675591857376204927427965785388740271051686146205993367371564236113989854113304271590447100565323785689228839077394857727795852122771824338794861693290468054539720819202106427585317565399557300870353162918572541512921568958967883795256810995425309745475003352976728891527641757831405374689520185297796676933915724374014281326378529808226346047207115998399595436474579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							837eb5e6a350842798bd86df8440e5c9389af889
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reimerfreeman.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c9e62530c000004030046304402206ef752f6f92a9d81557ac9f6b9637fce0654fad20e2b568a27e7282138581dd5022064be68c3e61d53281b5d6caee5959a1e3d334a0b3e89e12151a20df3528f20f8007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c9e6252f10000040300473045022100fe332b892733816aedc65bac7fa771b5d50ec2b7e1fa907d7c9d7cf901849c6d02205c3773564cc97da0bb328ac250e71ca9fa33244bc1852dab7c886de83d66d814
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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