www.usim.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ac:84:44:9e:63:56:ee:09:4f:01:a9:80:57:5d:2d:6e:af was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.usim.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ac:84:44:9e:63:56:ee:09:4f:01:a9:80:57:5d:2d:6e:af
Serial Number (int): 320041239289803353864098684850277654032047
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8e:d0:58:60:95:83:c1:d2:0e:33:2e:95:e5:94:48:69:9b:21:39:99
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 50:c0:25:af:8e:ca:8b:a5:56:65:5f:be:51:2a:c8:66:a2:31:fe:d2
Fingerprint (sha256): 94:68:53:da:c0:bd:c1:7b:b0:91:65:68:7f:2a:f3:ae:c3:d0:a4:6a:1c:bd:5f:47:cd:16:c7:dc:ac:0f:87:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.usim.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.usim.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.usim.co

Other certificates including the domain name usim.co

(limited to 100 certificates)
www.usim.co
usim.co
ritz.bar
usim.co
www.usim.co
usim.co
www.tobyo.com
www.usim.co
www.usim.co
www.sanmartinoinrio.net

Certificate

The complete raw certificate details for www.usim.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320041239289803353864098684850277654032047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-19 13:21:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-18 13:21:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.usim.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 815752353581385824724677748892783585853058169651673281430491196879195564708423827810693493695624134094500677725116183821857650939035176174195421873997200022015814179395969298505371771904635405005301548504682024360912980881104540122028532607398248647739802852492544086347470486632555817856364915149992784818827456867186770876353650056161649100780636826791165907666350164992811328110256150542607236210886296532248189557522631169632614235945427408512399402220279262081142728652242023789283074786913162304117887947599460216355992671789232007891011374226344839483972070949369186665713376953721354374997458025739016346369180757416800027477160216468338108590700264089769213142174977560464312195053078990090024431605665878839238829110901305409066631245000534497279467431068043861621297858027029886725074838782164843281337358360685128264115211346647757524911787388980042495293637647058585724650979499167066391423096818110629929815910038649402582712319958050122581084508529755938166319241240480918764969855411647949035011588914311962933055956934253831181788066081152375350974822830589905207569873259277768231494624144358979742684461254227930819361337785253413594874057711337462158577095082657988123926788833942096209408137662894607824662264519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ed058609583c1d20e332e95e59448699b213999
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usim.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d49e5df180000040300473045022100e69a0097e96aad241c9d6136ca8b1ff9bc4676101a5ded3a804b0dd89f8926660220040340217a1056785d471273d25ba581e4a128111353dcbf8aab7e296841c0d600760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d49e5e0fd0000040300473045022100ace8b895d961c4f57009077b8af72161bc39b38749cd3387396596d2a53fc176022052711bcb1eb764a9199329cf3170fa963a83c2ed2282a268508188b3286455f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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