oralmente.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:b0:7a:35:2d:ab:8f:f0:44:97:9d:61:51:f2:d6:7f:4b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=oralmente.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:b0:7a:35:2d:ab:8f:f0:44:97:9d:61:51:f2:d6:7f:4b
Serial Number (int): 284030072678123637225441515401896676196171
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:28:28:9f:7d:b3:f3:67:2f:e5:3a:7f:a0:a8:71:72:07:15:d9:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d7:a8:ef:e8:7d:0a:24:16:69:0b:6a:19:3f:51:fe:10:03:44:35:6d
Fingerprint (sha256): bd:48:b3:49:44:d7:ea:51:7a:d6:f9:bd:51:62:dd:15:d1:00:c4:e1:12:5c:64:88:5f:d3:7e:09:55:73:41:ca

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate oralmente.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for oralmente.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

oralmente.com

Other certificates including the domain name oralmente.com

(limited to 100 certificates)
oralmente.com
www.oyoon.com
34842.com
oralmente.com
parsimonia.com
oralmente.com
oralmente.com
chance.house
www.82759.com
oralmente.com
oralmente.com
oralmente.com
www.parsimonia.com

Certificate

The complete raw certificate details for oralmente.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284030072678123637225441515401896676196171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 14:17:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 14:17:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oralmente.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764927027907676379397521678475569482923684092149853572049748409710837043478596371325124465967365762516911155295115437939747672796622688924530948884487251016639929291352792785266477970968730068022887554428204325512017719802364952690980829637944989934026183226237013717592300578200322259623246058167044147857002565234746954613892732503631485652828844257271495658408131683596867854153348182920264926031634356182863320457400973705015964914002404209177236497303250270606650524133485416854954474099606078051903037750194026777269573344992231758376828410490040140714118428518858846156587167213661885635921619179700891240696786873113206654661130752687853516286242349545421375136436947831466513254621499487567616112523471760161066630556184545298580665608807598388460461717519995296420957880303680160618858121316196614178632693856966970132731036416624076589130559866717668389857888400722181270008780853907135441650968886614784441000234723336230144605594837158118327667614068247601689207092225256898451350801191489003212275551391638734305678716208997481253374244444604965375508466297607635119143023756784234205879235598229975716211190020542178549193420237696701428965169778366243552016816333950664752910714350626508150692677263149560264640779447
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e328289f7db3f3672fe53a7fa0a871720715d913
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oralmente.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170203a7a04000004030047304502205a86342568f2f8a31510300625fce877af60cf2d26f5c2f9ef2a7a81e0d94174022100c6f3b1ea89b9826eafc4758ea2d9997288c239c0b1bca5ef71ce1f385f17cb6900750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170203a7a0400000403004630440220679e51f246df861a47dc31e477ab93a6616e59a4d89d8bb29656331c1a54f14602202ed585c6d9c54ea79305608c603cee27c63f42cd7572c774dc72ca4fbcc2c468
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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