romola.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:75:d8:14:98:49:cd:f2:f2:ae:60:c6:a5:96:15:71:d3:0a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=romola.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:75:d8:14:98:49:cd:f2:f2:ae:60:c6:a5:96:15:71:d3:0aSerial Number (int): 301437114906830906441872639842138425774858
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 9c:07:21:c8:69:83:95:e6:3c:51:27:55:48:2d:54:8a:c5:69:e1:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d3:be:bc:cf:6f:d3:72:56:3a:5a:68:3a:10:08:b2:37:8e:c2:4f:9d
Fingerprint (sha256): c8:c4:26:a9:0f:7c:bf:57:29:d9:04:e0:a8:60:7d:f2:f0:1a:49:dc:46:24:5e:27:a9:94:a6:85:14:04:82:cd
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate romola.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for romola.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
romola.co
Other certificates including the domain name romola.co
(limited to 100 certificates)
saharabank.com
www.romola.co
homeloans.london
nuclearsports.com
www.repubblicaceca.co
srtfm.com
www.giorgia.co
www.romola.co
www.indianwomensleague.in
blackcatrealty.com
www.orlandomedia.co
www.giorgia.co
www.decor2021.co
www.romola.co
follonica.co
f3.org
anchorcarwash.com
professionalhire.in
romola.co
romola.co
www.kidsskigoggles.com
medicalmarijuana.farm
www.zosta.co
www.romola.co
homeloans.london
nuclearsports.com
www.repubblicaceca.co
srtfm.com
www.giorgia.co
www.romola.co
www.indianwomensleague.in
blackcatrealty.com
www.orlandomedia.co
www.giorgia.co
www.decor2021.co
www.romola.co
follonica.co
f3.org
anchorcarwash.com
professionalhire.in
romola.co
romola.co
www.kidsskigoggles.com
medicalmarijuana.farm
www.zosta.co
Certificate
The complete raw certificate details for romola.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgISA3XYFJhJzfLyrmDGpZYVcdMKMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNjQ2MzRaFw0x OTA4MjYxNjQ2MzRaMBQxEjAQBgNVBAMTCXJvbW9sYS5jbzCCAiIwDQYJKoZIhvcN AQEBBQADggIPADCCAgoCggIBAMAQjQpwe5RzjAGDzriWFvOtMqJxExqzYxEDc7cw F1p5E1F2Yhn82KlO+P1jbRCNj2Yon6zD0y5/yeelFwdX7d+IB/E14CnYlWVXPmW6 RKHpTKiIRfU0TPzCWVoBABPHolNnMZGNTig/Ok8tPCtftUM9h4ja3xz1CRLKWomz HiLs/tjnvs1cwH7Js+wOsuo0DBOzRTv2VSP23Z06rPYcPxuuCigpuM2+3B2GJBfz OKWj35VV+VlfrABOq+BuPYsQ/K69sWsiRy7xizX+D06wwdRO8A7Z4IBOzc5ObyuP BFbejT0lyTNvU2vNmU7ZdueMfBwTwFS8ngXJ1wdLL7NRwOqVkbvNdeq8oVH2Rz/B yqVMo7gvKzbWZ49CdvuG2F5Dy9vLUWo8ifv8TZeYLQB1upky4ItzjoItPuxJZrBO Lg2RuLQgz6BqeuLsifMdqSk469nD/cvQ+cKevbkot8QGCD1hB1u7AkVAIGf2EBVc jptGDsLD5gGtMMJ04jSmaJXr/ZuFgY7dkgQWb6zs5hj11ACLhxU5gOsyqnUtgg4c nPt4aGPaiuKnlQFgOS1iSJvr7SmC1UoOfsR0G4lDEb1Z+MjNA+DaI6LtSyBAwRo0 Sus4N+6fCPfLk2MGY4HQvL+rfvvfDJWEQA4miMfvnw72BuSB5Sq+8H4mLY2uU32q 3JmDAgMBAAGjggJdMIICWTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJwHIchpg5Xm PFEnVUgtVIrFaeHWMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJcm9tb2xhLmNvMEwGA1UdIARFMEMw CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j cHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7a gzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFq/40LfgAABAMARjBEAiB2 leeSNJrUWbETr+MokmzMSa7/Rpwb5AmqJVrNOorZTQIgSzq+miz6pwo0ssbuIE+O XKIKwN4REe9u4EhjDAvnRLwAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTl RUf0eAAAAWr/jQuJAAAEAwBHMEUCIQCHhSJWAEwWB0rcaiVKtzi9Zzo7bPLOGZtD vC7/gsLQsQIgNwNMuBAHmkbt/a11uJJaVELoz5tgIHaCOzfey5erC28wDQYJKoZI hvcNAQELBQADggEBAA45C7QeJndorVLSh7GlZQTGyoOi0sWbRcmlcyz1YM6PB9ZE 2VtJK83WziOAplfS0jB7FqIvRTJT8f4IGlP62LXBTavGinXIcm2StvR6JuOsjTkR YmTYEI7JYvYmWrG2PNUfkwGrZBpa6i9m1rGjnadvtFtG1gbeZMLRhLbZ82EniM4L W/8jMJcAooic/62GIbXaIZKUozXl4st+ugjMJyRpb7AtNAAo05743Pvdn7005MKu 4trtUXGu5Hf0QcIjW7hTk55LQNfK2STysISgs21DZ4VZRNT4krWIZjAvTGVLOaef yAv/PGgzT9QqCVymJPwt7FFwkOmkZDhcdnULWVI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwBCNCnB7lHOMAYPOuJYW 860yonETGrNjEQNztzAXWnkTUXZiGfzYqU74/WNtEI2PZiifrMPTLn/J56UXB1ft 34gH8TXgKdiVZVc+ZbpEoelMqIhF9TRM/MJZWgEAE8eiU2cxkY1OKD86Ty08K1+1 Qz2HiNrfHPUJEspaibMeIuz+2Oe+zVzAfsmz7A6y6jQME7NFO/ZVI/bdnTqs9hw/ G64KKCm4zb7cHYYkF/M4paPflVX5WV+sAE6r4G49ixD8rr2xayJHLvGLNf4PTrDB 1E7wDtnggE7Nzk5vK48EVt6NPSXJM29Ta82ZTtl254x8HBPAVLyeBcnXB0svs1HA 6pWRu8116ryhUfZHP8HKpUyjuC8rNtZnj0J2+4bYXkPL28tRajyJ+/xNl5gtAHW6 mTLgi3OOgi0+7ElmsE4uDZG4tCDPoGp64uyJ8x2pKTjr2cP9y9D5wp69uSi3xAYI PWEHW7sCRUAgZ/YQFVyOm0YOwsPmAa0wwnTiNKZolev9m4WBjt2SBBZvrOzmGPXU AIuHFTmA6zKqdS2CDhyc+3hoY9qK4qeVAWA5LWJIm+vtKYLVSg5+xHQbiUMRvVn4 yM0D4Nojou1LIEDBGjRK6zg37p8I98uTYwZjgdC8v6t++98MlYRADiaIx++fDvYG 5IHlKr7wfiYtja5TfarcmYMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 301437114906830906441872639842138425774858 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 16:46:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 16:46:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'romola.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783555418663004578493507804755357496567354402064287843431927765011265989212569898906381441898924105408676068402827287413248820481898875618876882895844185102380572105992070226740068754088476190601459692039868672711699184630970122109321797808332731250791566237051877484301266117869893872831775212115018923461085384503555828771618418218503271602711723548864999217673679641243512911072456035469118354829155036444128849590208582702075336377855853892066097750803602681748512963017059909780226618527604005030592261597267201102049430793336504074688067866673287857458611809327195698622965995493813146641258847708261476556104678533132771465148336410999272427144870185735135659488920803222949018865288760755957768311010516753721725571946030819248641436289470884330170717636400696883817278017708041024297670853604024445236194691730467627844540985103914332626366812933160554715677467115262579959120971145368328939005336077933431003858823218284662809992606505083639240471352694470025862690587383744789014758362968906741528220647835944015932040442244604310437415596967227406106396925765626230374238782233123682931876008732216517803377375507042368015001281945396544068098318227082250646947189179095413478381389905989463478268305780612155864413673859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9c0721c8698395e63c512755482d548ac569e1d6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'romola.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff8d0b7e000004030046304402207695e792349ad459b113afe328926ccc49aeff469c1be409aa255acd3a8ad94d02204b3abe9a2cfaa70a34b2c6ee204f8e5ca20ac0de1111ef6ee048630c0be744bc007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aff8d0b89000004030047304502210087852256004c16074adc6a254ab738bd673a3b6cf2ce199b43bc2eff82c2d0b1022037034cb810079a46edfdad75b8925a5442e8cf9b602076823b37decb97ab0b6f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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