www.goldnest.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:16:96:66:ea:d9:5b:31:9c:2c:17:a1:8f:bc:50:0e:80 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.goldnest.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:16:96:66:ea:d9:5b:31:9c:2c:17:a1:8f:bc:50:0e:80
Serial Number (int): 339631826134945073004261903519169467387520
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:8b:0c:da:c2:4c:8b:28:ee:a7:d8:83:b3:6b:c1:8a:24:44:1a:30
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6f:44:68:8e:cc:ab:b3:9e:53:00:df:b0:d0:f6:e6:9c:4a:36:0a:89
Fingerprint (sha256): f5:5f:95:c2:60:8e:20:ec:4e:7e:63:9d:f8:27:f9:39:26:30:bb:a0:e0:b6:bc:e9:a1:59:82:19:18:c6:a0:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.goldnest.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.goldnest.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goldnest.co
www.goldnest.co

Other certificates including the domain name goldnest.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.goldnest.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgISA+YWlmbq2VsxnCwXoY+8UA6AMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjMxNzM0NTJaFw0x
OTEyMjIxNzM0NTJaMBoxGDAWBgNVBAMTD3d3dy5nb2xkbmVzdC5jbzCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAMPj9/GZxs1M8gIMQ2xpGIxFTBk5gOxg
3fxSRvnBWftjANQs7SX0hHouoczY18FQRL1+XJBa7Smyfq88tNCkofRyjNs797or
gu7Vd9zeoCB4kMyubBsgpj6wlwM4ipyEqO4EkVCTsIb7iYMYsJ9tK8BziN9Up39P
RLWPj/otUECp8swy8teXxxw8AWvOp4m9ZWW8/LIdk5ZsjPNlUjcf1BpI9f54L4hI
ogmO/ZfneLtPhw9fwjwj/ZimBPwU6NTqDw41K5ZgVZRwBqTQNUgWUE6CKTFSMHH8
sjokE38S8CW0X0bURAdkSJ04MLyRRpL7/qEDlZVYC0p/G2RrbJdF50Lrt2HiDUm0
gVc5EhNhx1IWxPI88Zi9fmnMkQOOr+8w2hRmJCi7Xf4WXJl3UIeWB6idOdnxfpYg
u8nvzH7uIDkv7iD9vc2Ud+GhDRK/N6PR1IO2KrqRyu14WiyPhKcmBGISn351Gamm
DoCV0gMOThehnvVqJYIwzZo4x8dz8rle9XOTNRoKQknMJcQcb2ll/AAXtyiLOFmw
fOz+T0gieO4bAcFfxIgOcHlK8Iu7SDX67SxbPSBYTWZGRWRjfbxEerFEB09g72Uo
DZNW0N68QqZ7J86uWFrvk20HV56vb0x7lPvuNMLyxW/r/YepB942+p9prdlIJyYm
AH0khS7Nj3whAgMBAAGjggJyMIICbjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGGL
DNrCTIso7qfYg7NrwYokRBowMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wJwYDVR0RBCAwHoILZ29sZG5lc3QuY2+CD3d3
dy5nb2xkbmVzdC5jbzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEB
ATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUG
CisGAQQB1nkCBAIEgfYEgfMA8QB2AOJpS64m6OlACeiGG7Y7g9Q+5/50iPukjyiT
AZ3d8dv+AAABbV9nqvkAAAQDAEcwRQIhANj6yvM/U4/t10KlBNQFUzzZL/sxgLQG
NNhr/dpqqUbKAiAKz6glDCPRsGZDx9g0mGi/F96CgWtoKA9dFVIERiyWfwB3AGPy
283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbV9nrQsAAAQDAEgwRgIh
AIYwZtFrqSdAIOtbTb6Xz/8y00SLQRcRsk7Xs0WJ7r2rAiEAgBqAsuwqbhKm5j/V
cQQsCrxOqfBpoPc4B1XMfj8q1/owDQYJKoZIhvcNAQELBQADggEBAEnhkYRJ03/y
RDbp/qObobFbLhOAua5N4kdtYUSF/pxCtzQ5d6VcysQtH/cMg4AnTwrSOyJjTdon
q+xE1jOni5nm/IsPF3d+svCtjYBMMbiJ7eizrx1tzxK8Blh9wg3GmNzSDp39uP6V
xND17irmGR3K9QmG0DNYOCjhJFVa9TP5NJjtIxGzKavKFzf4On2VwvtBy4zCjaSP
gZHl47MkSP81jaSYZDZGXfmOzofFeitpP/sqJ7IZEqv2WwH55EZOVSM7Cf7rypNO
oMFbn3fKa9luPxlI06zRSul3hLvUCJ6DU3bU+r2J4UAvmWMolqu7rDHWl/3jINd+
ZXgjxmjOpc4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw+P38ZnGzUzyAgxDbGkY
jEVMGTmA7GDd/FJG+cFZ+2MA1CztJfSEei6hzNjXwVBEvX5ckFrtKbJ+rzy00KSh
9HKM2zv3uiuC7tV33N6gIHiQzK5sGyCmPrCXAziKnISo7gSRUJOwhvuJgxiwn20r
wHOI31Snf09EtY+P+i1QQKnyzDLy15fHHDwBa86nib1lZbz8sh2TlmyM82VSNx/U
Gkj1/ngviEiiCY79l+d4u0+HD1/CPCP9mKYE/BTo1OoPDjUrlmBVlHAGpNA1SBZQ
ToIpMVIwcfyyOiQTfxLwJbRfRtREB2RInTgwvJFGkvv+oQOVlVgLSn8bZGtsl0Xn
Quu3YeINSbSBVzkSE2HHUhbE8jzxmL1+acyRA46v7zDaFGYkKLtd/hZcmXdQh5YH
qJ052fF+liC7ye/Mfu4gOS/uIP29zZR34aENEr83o9HUg7YqupHK7XhaLI+EpyYE
YhKffnUZqaYOgJXSAw5OF6Ge9WolgjDNmjjHx3PyuV71c5M1GgpCScwlxBxvaWX8
ABe3KIs4WbB87P5PSCJ47hsBwV/EiA5weUrwi7tINfrtLFs9IFhNZkZFZGN9vER6
sUQHT2DvZSgNk1bQ3rxCpnsnzq5YWu+TbQdXnq9vTHuU++40wvLFb+v9h6kH3jb6
n2mt2UgnJiYAfSSFLs2PfCECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339631826134945073004261903519169467387520
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 17:34:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-22 17:34:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.goldnest.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799163524757160041582432470987661933279102065804347352716439836626171285394570342835389558623678619153225012994417582643228296160790205652018285753014910441964709001821273898017628850125284886160744312993946205800482930670286752459702442535559898907034635060245213177149309165900720433185817225490426391643822325485678028449918588958013248197419263494067360559496676269452754695596895962661933470627855977211644566559749185478732682560315139064145805175881618790513881778494364439342183873461900209064841132464195275597023779251051905552696010987763460561921902062198061620961640795241257045226652013050782598546685032181430919941282550186200977154462344747058429110041334832898100200226539301005009748417474549576680974744163003216065706839969985368227302396751568557440841948592464927741663009391779142880174073797722997147511517782167982863795025232494505333306645137066259173349133672356693363253367459941534894351786837019885666972911858739139938200064062764800114898165755517223305621695073903416802877838724208235649626589915123690957574557921689490795331582397762825579041247971185992088452714324418436006071121814709664205256281737876033843005310674722998747626042819647259298434617319509378721271498999731361130715898936353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							618b0cdac24c8b28eea7d883b36bc18a24441a30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goldnest.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goldnest.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d5f67aaf90000040300473045022100d8facaf33f538fedd742a504d405533cd92ffb3180b40634d86bfdda6aa946ca02200acfa8250c23d1b06643c7d8349868bf17de82816b68280f5d155204462c967f00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d5f67ad0b0000040300483046022100863066d16ba9274020eb5b4dbe97cfff32d3448b411711b24ed7b34589eebdab022100801a80b2ec2a6e12a6e63fd571042c0abc4ea9f069a0f7380755cc7e3f2ad7fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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