phimnoi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:38:d8:73:0b:a2:ef:04:19:e4:ad:c8:e9:f8:06:a7:c3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=phimnoi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:38:d8:73:0b:a2:ef:04:19:e4:ad:c8:e9:f8:06:a7:c3
Serial Number (int): 295100372757738086366224225271735053100995
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0d:5e:b2:e1:ca:71:02:1b:5e:f8:50:fb:91:ab:34:cf:93:02:2b:e9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e1:fd:45:e7:50:6a:37:2d:b2:e6:81:a6:9b:d6:11:2a:61:9e:3e:35
Fingerprint (sha256): 5f:74:d4:78:04:2a:76:ba:01:03:c4:a8:19:79:63:3b:e1:3a:e2:69:3f:ad:b3:bf:11:57:bf:6b:be:de:a0:92

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate phimnoi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phimnoi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

phimnoi.com

Other certificates including the domain name phimnoi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for phimnoi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAui2xFWoPl4cvhxb+DyAc
d3u53fI9U/q8+n/pkFb8RQiGHFrib0qltLgpPB3p5dqETtabL83OQDZU9pt+U4nI
mkh90qmcy98M6POjS1YhhSZp01+bYeo2IT+YbisBuGPUJ0XIcVthoDFvlkEETI+X
oYy3as9gi8oBIU8BfZj6pxqmwvtgQksyADRGvgY87DXTjEYKy8zvgfuhv2qiAEtW
gwNVgxI0uzWT2he6iF9LaBSP7sh2CRUh0O1bJcJ9cFKSgcO6WOBdR4YZw/DB1x/a
RPHEiTaHqkhUfY0hlxNQQEFF6pVd2FjN0ckQ9S8eiHRFpV/ec7CDrZxSTMCtdWhC
SbXJZtK5bNKBhTEdtFwWuT4SqQZkZ+JeKA3H8Lvm/Bv3gDuqwgq7YdCIl9fPjK4A
gf9XT1lHTxpWs2LSDyGOf+uFhi2CRojsix9nwbdtAXGPKeeN0B5KTwN6F1pd+vot
1w3ldh6n4hpqTu41p6MGcjZRtzqyHO1Vy6g6IXm8lkRQEpPOCTQt3IVIEl8fb2F1
sfC2epThRUZoUFZpcvnH+d3MSLj9jureeZmcMsLQ756qZKgMCN+/h5YsNgr8LDj3
i5iKAqFiYt0slgD6YQ0iYcLtaJuhcSEdCjHgpJjt+06/cs6NYc+amUdRbrX0uIwh
kGuPtsRiZQDoWrWnHtOjU0cCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295100372757738086366224225271735053100995
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-31 03:20:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 03:20:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phimnoi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759541945118605658786121098312482617366873453168103622902349290802691135608648281648336219359926102589689644067781812437116663074891990530782101074906511456111745148202885445946015774185632201866351735395422747632395371752894185561424458838447696147047792311484650401708613573330241349050375204560370243928705806580030657783524820362342646708693564160182892996461120109692074586697908405620035157975999335680844551752764802964900486116067031566591233429662615687414001394118450808585628882536639229077914620173607414231786527326199791854792802851425159767619794810726410938763254504790939099403280334783023095212647465103967027242591729708369216383450579723630455923168056997281866332448716404098311276326570622127672270743122216156491464943791754503169096665878430656596806658776698897601194649430426475656216401673178220744810100389829885987446338533672742036198221486557741147973235901994077831657235888605673789106645970678786262062104131903743826841159936189255036520880666644789353145359542659796249592354745845895148159580124055726491635297559554556114296489439929125308429399482569770060587038381138391334495470040038447994101282463088973355161276073308548265923195079545422481931210033035508654708001712152045923068119569223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d5eb2e1ca71021b5ef850fb91ab34cf93022be9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phimnoi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b0c1dc06b000004030047304502204aba8c574a28aaa46b7a391b291a84cb17604f37852847400fa290ea2b27b8f3022100870a4572d4c51a790bb55bc226db73f73b8af09468c1df85ae437a9949509801007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016b0c1dc08c0000040300463044022078d064e65df0baa7589dd7c8f1c5676268ba36c173a4316aa05905e3e562fca90220238d3bcf2c3304fc869ebbe93264df52b2bee38a5df041785b1c6e71f45ae58e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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