ramora.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:15:3f:6a:8e:b3:37:65:3a:b7:d5:c0:73:e5:e2:12:38:7a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ramora.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:3f:6a:8e:b3:37:65:3a:b7:d5:c0:73:e5:e2:12:38:7a
Serial Number (int): 268567082142123050927251013637239290869882
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: da:1c:d3:74:41:bf:1d:ff:e8:f6:c8:48:8f:72:18:42:27:c8:79:9c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 44:a3:f8:2d:a2:78:96:83:64:24:2a:f9:91:ce:9e:67:9d:4e:c6:43
Fingerprint (sha256): 71:ba:f5:ef:24:ec:82:ba:7d:ac:1b:96:38:2a:53:72:89:52:54:f4:47:0e:d6:3d:b6:92:a9:38:0e:a7:05:d9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ramora.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ramora.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ramora.co
www.ramora.co

Other certificates including the domain name ramora.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for ramora.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISAxU/ao6zN2U6t9XAc+XiEjh6MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MTExNTExNTBaFw0x
OTEwMDkxNTExNTBaMBQxEjAQBgNVBAMTCXJhbW9yYS5jbzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAM9ba5B0XWn4NjkWQP3hKireCWIgNPtKPMxgY8SE
eCpwyXh0dLmYj6yHWFb0mUyWdGxR+2a3pphsVH15mbuqCc4oaZCpeRMFm5McGckb
rAAcWpjjBO4cWCG+q37IsZ5Wp1IJRU1aYO8f8vtBDBCvZWCbxVv07d4zOz/K6jNh
3g5dJL+C/oWcFer7g8wSeDBJUHNW1vrmc8ORQpPBCFvPh+pWKbdVFRqxQxa6OrTR
4ks1/RGWOCMEZIr3Bn0ZuosEIb/lzwNLjOU3qqJZQ2SQgdIO+6x9QZJ3Mb+dqyed
Rg9lUuuC9dQm81aSZfIaVo/JQQSl0QXp+3KGujMCmAliHcBYwCZ67no9S4T7B6EK
kEj6hgvEwdmhGMgsk08X80cEiAyT/YaCiMr3/WwWSkeIDbLHCAklbaVnQbVkkVwG
THtErxj2Y5K63AmZlMdZchbwo5czka3sNkUZtBqszLc+BVrq+laLEvIFqqPCqnVF
3SqxaOrBh/JZRpSsoo+aMrz7g/0BEOlJi2YjpP1T1FmJ7kRrQA+RyXuKP+DoYiCe
/Gz+GUhwjfmCiCBKotxl0suc1bcC+f6YiGJfpwXbc7fWj6nvnjTUpmZPl5ARvtDd
hEzmAuwUA75uJeD1aE9SGVQXiYb1nGIG+cMe077VDkZJmW/TvS/W1OZTNoprdhtS
pWWNAgMBAAGjggJtMIICaTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNoc03RBvx3/
6PbISI9yGEInyHmcMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wIwYDVR0RBBwwGoIJcmFtb3JhLmNvgg13d3cucmFtb3Jh
LmNvMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYB
BQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFr
4c4fxgAABAMARzBFAiEAq3x56cLX4u8ARdBkaMm52NsGOmn8sFiJH/oGbhJmFI4C
IHq/JX7QP7+mU1n2Yf49YD8jKFr+ys6zTV7R9R7TyobCAHYAY/Lbzeg7zCzPC3KE
J1drM6SNYXePvXWmOLHHaFRL2I0AAAFr4c4f5wAABAMARzBFAiEAha7YgQsKIBuc
5F2aASVtae3KiDtSg3T0txJ3lQUB0YkCIDCWB+aEpRB5IjyRFkpFRE6/PNC+0tYN
oYyJi7xQUnuJMA0GCSqGSIb3DQEBCwUAA4IBAQB5pCQe98PEN+Mesb0PXcEs5pgh
377yMf68F11qqMgo65ZUtIAbF+a9ztzs+sq+cny67MtNaTQKb8PlxwEascoiVjy2
0hJOXb1EAWA1BxIPU5VHuDH6exahtGKrs87sbeU/v3zRM4W5ntDx2Sq1Q0TIyCCp
tkcaCHfMEOqIditJhFUt6OIr2+I4xcUY1NCvockR9DHJQBeGLEvEON0+W0JRsQ3p
lphIJMd+BQYcdHkarE9phrp5c25EZuKMSAatPiu0wk7Eo0l/DB0c4QJbFnQN5slC
lMO6pUnx7MsrrBxC+hlm+FFj9I5Q+4r18tf9vm4657Lm2+W4cGrWq03njxaT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268567082142123050927251013637239290869882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-11 15:11:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 15:11:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ramora.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 845943203979693690168538211593722871632314304981468820230128264677771443715424615236214427521952029106320480161156565906468979516323797923809962699177164488364773885504050651807355710337679700623145919302391639070175693453076012189220748843500522437252308826446386655516608541377255644010386092497929880366250172189047336596111663069160517894644083634625568328754965517209601283428631882362585092389921788567278301793946724473378844363275240545550942091971420195068680531488584619217177941842767241718954501536446146295423638907685648903909676862612767476229300836277457998622715787327529874994211712122454313104059952968099186869713767863074689751033204722928064383114627951917298123654071446923698411223025446296984576636963953061321209550876066511939226671127172137892211521682525111374467367273251606696147778334677136411224884907748830096558179485792866786706771724779828086117290938517338807465637798151578874529229591460794694048444231995386890619966678426344366485942376171488015485956676699735398361899633118922455896738412440661015066722222577976765061429179160629242451068552131095484995396512840388554671489159147783061263201543402330134762994069984416673914801481824386632129461705856565054373469536148802858317991208333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da1cd37441bf1dffe8f6c8488f72184227c8799c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramora.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramora.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016be1ce1fc60000040300473045022100ab7c79e9c2d7e2ef0045d06468c9b9d8db063a69fcb058891ffa066e1266148e02207abf257ed03fbfa65359f661fe3d603f23285afecaceb34d5ed1f51ed3ca86c200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016be1ce1fe7000004030047304502210085aed8810b0a201b9ce45d9a01256d69edca883b528374f4b71277950501d1890220309607e684a51079223c91164a45444ebf3cd0bed2d60da18c898bbc50527b89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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