faidomanda.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:77:a2:e7:04:2f:17:a8:76:1c:0b:b7:94:00:39:66:45:f5 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=faidomanda.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:77:a2:e7:04:2f:17:a8:76:1c:0b:b7:94:00:39:66:45:f5Serial Number (int): 389159279831384825520527073458761964602869
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: e1:f2:1b:19:70:87:4e:38:db:56:8a:9b:9f:21:bc:2f:14:85:63:3f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bd:cd:5a:32:24:b2:23:c4:87:fd:e4:b8:69:08:03:81:a6:2e:22:86
Fingerprint (sha256): dc:bf:eb:f0:a9:fc:a6:53:ce:2b:98:a6:ef:4d:55:9c:36:b1:75:2d:b5:c0:a9:5e:45:d3:c4:3a:f2:23:0b:86
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate faidomanda.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for faidomanda.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
faidomanda.com
Other certificates including the domain name faidomanda.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for faidomanda.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgISBHei5wQvF6h2HAu3lAA5ZkX1MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDIxNjE4MjhaFw0y MDAzMDExNjE4MjhaMBkxFzAVBgNVBAMTDmZhaWRvbWFuZGEuY29tMIICIjANBgkq hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArA05+iPJO7ouXIol72vvIFrzKVrceaCZ rtm/ugb+2xT594/EKQpieVrLH2csVXNRoGqc3N3FCiACRQd8htHRmUisn7Gf1ZhU qD44C/WlP1whXVelA/D6xJuYUycU+00p2hz9DDuA0yyMHNTG1PiSjfDPpCwUHLAC PDHr+OvhiukPkcXeQ7DJOhcdTmqsNVhgi2sL8/NWkwZDBpN1K+REvEV5zIfioAAd LnkL8JMz9utg3YExhxeRZWdnvhCHyJegcy2J4VbFVZvBLp8ZJP+4e+TecGvMUmrU Jz0KPg1ztsdmmb6fo4EUU4t09PkenC/k9DXHNUpyj0FLq7avjwFXnKfTAlkswqgL TxWEXISxU0zOcwUTBBsTMvsd8s56Yfp08TPGSq2P7vv3gmJJo1hwa0DF3d6416rq BXTUIgQMzgA1OtNrAnUooAQ7GUW979vtH7ASytZJPkTmZrM2vEsl7s+FqCkWuA/S HvCvZEoeR+oSBIhIyLi6apOAXPjiFYPlYePX9TY5Js0yds//W1Xizc2jA/K8lawp dRPQcUiqb/k3DZEtXom45qBcWy+f16QlHoYd7sOodHBOJzJ0nL5UJiJTQShTsl+r ntYN16mfUGaqk+y0Df/JzlKsSWnWuCnM8bHlAGTIFP5V0JptBzp6a0hT0NkJsfea Cr3asvi22mMCAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4fIb GXCHTjjbVoqbnyG8LxSFYz8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo 7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg5mYWlkb21hbmRhLmNvbTBM BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbsee34UA AAQDAEYwRAIgej6mD6Ofy55C4732tvn9GQioUmL06mjYyn4kIwgP+wICICt1ZwqL C71qQfZqwltAmfU3YyT0GML6BgFl0fSO+M2oAHYAsh4FzIuizYogTodm+Su5iiUg Z2va+nDnsklTLe+LkF4AAAFux57fdwAABAMARzBFAiEAlZx/Yiq4RX0Ul/If28Z4 dkEBD+/Ii1tbt1lD3V4qDrUCID6K/WEmIZml+sw9bHpjpfqIdCu7qSGvBd1vBiGz s8QkMA0GCSqGSIb3DQEBCwUAA4IBAQCU+khamrs6TxNKCQRZERG4OjrpSLHYu5mn +lO2iV28iLWIf0GM1NLjPsvbnZJ2S50Lg2KsZJhXMJPu8w/HQCCKbJr4z2n4PJ0j i/qQo8K+juPE31ueis+0k5uqEDF54hbqa+GUrcmIkKXMpp8iIv5Aj90U45/0Tye8 RRw0i5PacHtvpF++rhyx65BI0ihAZbgt7lUWdfZ4ivCeUYTjZBRSa2uFz/jpDGQ2 ssmi0rB8na8rJYOslEe8PUefDPTBbXFXgIR3jP3VZ86M0HJZCciNaBqsN16DNNO7 0LQGETiw86RS2pdIn2btfg2zkrq8kCK25GMNbM+9JNsiYsWf3RUA -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArA05+iPJO7ouXIol72vv IFrzKVrceaCZrtm/ugb+2xT594/EKQpieVrLH2csVXNRoGqc3N3FCiACRQd8htHR mUisn7Gf1ZhUqD44C/WlP1whXVelA/D6xJuYUycU+00p2hz9DDuA0yyMHNTG1PiS jfDPpCwUHLACPDHr+OvhiukPkcXeQ7DJOhcdTmqsNVhgi2sL8/NWkwZDBpN1K+RE vEV5zIfioAAdLnkL8JMz9utg3YExhxeRZWdnvhCHyJegcy2J4VbFVZvBLp8ZJP+4 e+TecGvMUmrUJz0KPg1ztsdmmb6fo4EUU4t09PkenC/k9DXHNUpyj0FLq7avjwFX nKfTAlkswqgLTxWEXISxU0zOcwUTBBsTMvsd8s56Yfp08TPGSq2P7vv3gmJJo1hw a0DF3d6416rqBXTUIgQMzgA1OtNrAnUooAQ7GUW979vtH7ASytZJPkTmZrM2vEsl 7s+FqCkWuA/SHvCvZEoeR+oSBIhIyLi6apOAXPjiFYPlYePX9TY5Js0yds//W1Xi zc2jA/K8lawpdRPQcUiqb/k3DZEtXom45qBcWy+f16QlHoYd7sOodHBOJzJ0nL5U JiJTQShTsl+rntYN16mfUGaqk+y0Df/JzlKsSWnWuCnM8bHlAGTIFP5V0JptBzp6 a0hT0NkJsfeaCr3asvi22mMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 389159279831384825520527073458761964602869 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 16:18:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 16:18:28 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'faidomanda.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701909558224629020936062741318576312964250306518305755004382818971751980724415494063230431278338637999492163127302028825056328382437030653556192559601937007741566681882084133652229023764401230980797105797463527639477635383558718467505373433700346457841547651629295006795285068000059941978459549358739044084098243685752131069977270066835967850108783114465018118975184163697983694749679489886640136750794696323800533194133598296965738745446996965546908436638989793643723394211923924627928139051574165128883076177155659123961349386209574069285141144256805739879685759296546384027525388341143128114962619015420408118991790505288415002984354864646100765647388170684216326070261298892148839027657522569908654147851107225637476995166993526652722080822279410704832293092815935283153566516487501921800650278452935749343226896027890354387236957474314897398649755447181920471871721025704580135052088553537111352794864048511489924701182434357490369198348810980379817299618901750286315386459505950552273298789264149815864991302078456290157792137803638566869062455587810154458168709082644685671741155906700907778454409645996888655954394662101009181025541316461989626091264120015202687881831491966281888291104753109694689848296476093544736031693411 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e1f21b1970874e38db568a9b9f21bc2f1485633f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faidomanda.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ec79edf85000004030046304402207a3ea60fa39fcb9e42e3bdf6b6f9fd1908a85262f4ea68d8ca7e2423080ffb0202202b75670a8b0bbd6a41f66ac25b4099f5376324f418c2fa060165d1f48ef8cda8007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ec79edf770000040300473045022100959c7f622ab8457d1497f21fdbc6787641010fefc88b5b5bb75943dd5e2a0eb502203e8afd61262199a5facc3d6c7a63a5fa88742bbba921af05dd6f0621b3b3c424 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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