www.romolo.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:84:26:27:de:47:35:ef:0d:d9:a8:38:56:af:a1:75:c4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.romolo.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:84:26:27:de:47:35:ef:0d:d9:a8:38:56:af:a1:75:c4
Serial Number (int): 342839999700733931184540081855994093729220
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6b:5b:99:d7:90:e6:0b:59:5c:e5:2e:2a:52:bb:8b:3f:d6:a5:ca:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:0d:39:92:1b:3c:f1:9d:3d:e4:b4:da:5f:0b:38:b9:67:a6:00:59
Fingerprint (sha256): cd:41:6e:46:dc:6c:19:be:2e:8e:f1:88:20:ba:89:ba:cc:6a:9e:30:dd:10:00:b0:f3:0b:cd:18:b1:73:ca:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.romolo.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.romolo.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.romolo.co

Other certificates including the domain name romolo.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.romolo.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342839999700733931184540081855994093729220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 22:15:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 22:15:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.romolo.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 793849288799208932457583219353648879916647309335717441831863425434579540294429768330443511142608235234501916472130230693177751770349859894147414919645820317216121429500733706288959037476266430235897717768100499136656300289041206081639958722180680485860786918514540563306375380813541894931854533649570043886200402116477528127255764465483699008048082223909477755362227034454568687400849116869572024022517034539158462406642301254203841336658128931688706895879960453869215455392032724588119291771325235583976563716536864223969845072163501240898824385139885702070500616164833700265332689523586184386934359003667796713334337996076997481511785946465493599194241288739338637138395324482431137424193104631401282377001667220298276203504552552629237771808483086604936309880335191695862249396822945453458925636952821309728774229768826881621357418751348094074762908314480444355409138332992699106026919262594816941928733609829842314654562315429440148996901296267474769469811327578719988520807923687066292393963383762677774340703867248880543464687788631662209134345633381965048414553816428968115067024250661440278716798396476270699631920167582582598432763768917162329249971124933042617985144472441641569876640167293263798636084350299148354472127219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b5b99d790e60b595ce52e2a52bb8b3fd6a5ca3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romolo.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3ade8320000004030046304402202fe94d55f639c88268b0879c9661246cdf78a2a8216e6593171ee83b0ef47349022051422f8acbb7545e3218d959bcc878ebbaeef7dbffe7c1284eb6bc4407f119df00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3ade85020000040300473045022100ed8b51552ea4f8d3103ec4fd2f626bcdabd2320b80810ad8621be4707ca1f3cb02200f897f8f06ce83699561944fbc91b850f99ab33e14fbc4e72dc58773cdcd5a4f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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