rimasti.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:85:54:87:c9:83:0c:6b:8d:ed:20:d9:ed:15:42:7c:92:d7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rimasti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:85:54:87:c9:83:0c:6b:8d:ed:20:d9:ed:15:42:7c:92:d7
Serial Number (int): 306706772794634454184317150664233173422807
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 12:5a:d4:15:b8:05:90:e2:b5:5d:15:36:3a:03:95:7c:77:e3:6c:f2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 96:6e:fb:cc:10:41:cd:50:c2:ae:a1:20:23:13:2d:9f:ee:c1:62:7e
Fingerprint (sha256): c1:ae:f3:d6:4d:7a:a4:aa:59:2e:89:db:83:f4:21:11:3f:11:d5:f0:74:1b:24:dc:6a:3a:9e:cf:da:d2:29:75

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rimasti.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rimasti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rimasti.com

Other certificates including the domain name rimasti.com

(limited to 100 certificates)
www.rimasti.com
www.helpless-laughter.com
www.rimasti.com
rimasti.com
www.rimasti.com
www.rimasti.com
www.rimasti.com
www.wpbuilding.com
rimasti.com
rimasti.com
rimasti.com
rimasti.com
rimasti.com
rimasti.com
www.rimasti.com
58.org

Certificate

The complete raw certificate details for rimasti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306706772794634454184317150664233173422807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 14:51:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 14:51:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rimasti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 856309278054420676519755004347958929624693071750954938252876470150670090014999113339126061784828318462258566281071154455761471365338663158588798279434289047851149336184912818788115532589489288626777139944291036511486496861790135052390824090869204926313872531079331525776313287805012592731309665499225590329983845567498448056422586205025011160612692687978072759166068955215546531910455982865850201799788497814280463178474121249149450705132222973251235030159652767357305339498777559737788781407202378483812260548946727703371510747333689275155455744828986189221431689299392098802207710835127486671177621527855400718198953167935938167796443329169493440553282301497222823082347818590169674365208404872707950129669747959171601128356248878898996271270183764938842225396871671039719646189856623008976407515140616209803605084015017434334252268440617686331605714352977565144738281970868046378562325231430996162164773739234944199585225791279228030006570703615535261164834381056829897672344596882924189541995233904474357816678476606406219047835952344619095565713713141276060255890343296873815512409003665653053388873141902376650703427429471346441910674913155579817362528981662917771485849816551109351090613445815342855465129077019719338300066093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							125ad415b80590e2b55d15363a03957c77e36cf2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rimasti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f9a73f3b30000040300483046022100cc7a03cab22531f05a7fb0442c5bc6d73c2975f933c811b51361bbc8aa5b449f022100e9557fb0b40802ce6ff87302663878236e4916f406cbd687be2755d4455831bf00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9a73f4020000040300473045022100bd2ac2e03b8bbaf0eba0112d2524abfdce8cb4b87b99937c5f5251f3b30c3f7d02200f83102bea17584e93a5d12d1f05467491b427126bf239136e94ca2648fc7897
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0006a669b82ce8ccd307c10ea01052788196ccb31f4c374d48d5ecd40e213517fd56f9347a552b2e6121d7ab54441b2700440d8e704e0dd7287fe1760bf4f37a7c683676189857f097f219fa09bab42d69f9e869c53f28f1bd3f50cbb448e5ac5762217430340fa728bb16a2d44704e2a62819dc0f4111707b05e2d8c981a047dd6a2d5ce2865d57aa2dee4162aee0f7af849bb4ab8450ad450fa6a8a4a37649bbd7d4a457c4ec34f15bfd13343a0ad0f834565e5fd4b276a68e8e41a914b5e681ebd939dddf3b74405e87cf0c3f8f7951e3500fa29e0513e60880ac0e9f5a1dd678f08310c5a6cc9932c9aa68098b387453c52a498e0b2b1a0968c80dee4cf34c