gianmario.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:da:d2:06:b5:33:ac:02:0c:5e:f3:e6:86:ab:da:56:20:3d was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=gianmario.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:da:d2:06:b5:33:ac:02:0c:5e:f3:e6:86:ab:da:56:20:3dSerial Number (int): 335797586492151316964303638746195501129789
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 89:0f:54:9c:5f:22:14:06:3d:47:54:ec:b2:ab:c7:f9:70:30:22:04
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 26:a1:3c:ff:bc:61:86:7d:0f:20:89:ed:33:87:39:4a:46:4c:f2:2e
Fingerprint (sha256): 01:78:ca:6e:f4:d2:72:45:5f:0a:7f:97:6e:d0:e2:0e:ac:f1:78:18:23:90:52:a9:a0:dd:33:27:ae:82:f1:79
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate gianmario.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gianmario.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gianmario.co
Other certificates including the domain name gianmario.co
(limited to 100 certificates)
gianmario.co
vehicleinsurances.co
www.xn--74q812ahlg.co
attilio.co
1kartists.com
teaminvestigations.com
pettoilet.com
www.attilio.co
www.guitar-strings.net
www.stadium-seating.industries
smartdeal.co
www.gianmario.co
www.henleys.net
www.mystery-shopping.co
www.gubbio.co
748.me
exploringjustice.bible
motorhouse.co
gianmario.co
www.gianmario.co
www.dronetography.co
gianmario.co
vehicleinsurances.co
www.xn--74q812ahlg.co
attilio.co
1kartists.com
teaminvestigations.com
pettoilet.com
www.attilio.co
www.guitar-strings.net
www.stadium-seating.industries
smartdeal.co
www.gianmario.co
www.henleys.net
www.mystery-shopping.co
www.gubbio.co
748.me
exploringjustice.bible
motorhouse.co
gianmario.co
www.gianmario.co
www.dronetography.co
gianmario.co
Certificate
The complete raw certificate details for gianmario.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTjCCBTagAwIBAgISA9rSBrUzrAIMXvPmhqvaViA9MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzI5NTlaFw0x OTA4MjYxNzI5NTlaMBcxFTATBgNVBAMTDGdpYW5tYXJpby5jbzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALXJbq0J+M5s88c+zoz4yQYu10CHLAaVl2rf YxZVAkh1VwmyJhVRAlBKPbrFHf0ruDzWHuwCARrOOmlbH8ewL560wmu2G4d3rh3A CCVdEHNPAXqtiStNPgVqdqgsZ0/2C+s3jCjZ1bfZ+kpvFPhCtWDeRm1rzd0ZyAnu 8O4KwOOoZiGxNZbCOyX8wee08JkjKYk1sG2Lbz45eCGuqMTVJ18lZQv7dUiZ+0pb 8h+S1b3LiEEMPXyF3HM4C8u9DfhRCWW8YZOdSO40Xgu0uH7DDIgBBtddxdoG9ZRr kZUKeP926Ozy+4dEYAymiZyLPKkuehWY1TiEMcNJg+CaINkD4BjUgFgtJngNoYKq n1Hv3IAVgUGt8k3953f2YfKod4WhTH90mnlvQqwPoLnj7L0OCTFbtKJxPY2EBn9j sgxvSdZxnUN4P6bGIibDTx+CylPWcOhmcWpYXLuBCa78V10ISRBBGcFswVmTBzD8 dFBLIrHSqANtOoPD9WYu8PHDmVIXb6wKSkWB49qKCz4jq7PGkggo58yM6oxpcsaV QxnGpIOADnQ2ckatJd3b/9ONWnLe6VEecser2YSHSwAsa2Ic9+hSk0sSbphwKwFT Iel/GrbS+wjZ2Zy1h/MxmPoDI0mCr8ApIXyFw+C+D3OMPld+RwbAP0giOmV1mh1p KJE6J/2fAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFIkPVJxf IhQGPUdU7LKrx/lwMCIEMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZ2lhbm1hcmlvLmNvMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHWeQIEAgSB8wSB8ADu AHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFq/7TKjgAABAMA RjBEAiBuRuEQJihcHSshrji/uWOpBpYUkHMn7Uw4T7Hx8gSU8AIgBu6GZBErHiax qMe0lML/dUlZEC/CLJdsW6cyMqa23SYAdQApPFGWVMg5ZbqqUPxYB9S3b79Yeily 3KTDDPTlRUf0eAAAAWr/tMqKAAAEAwBGMEQCIF5ptllVyLcqZsa+c6yxpMpzGxdx gfflSodmvHTxSsSdAiAtpQXgxhD4MTq9GVgSiLEOyh51UrHspt1Xy04yH3cZvTAN BgkqhkiG9w0BAQsFAAOCAQEAdah21bGUFgKgRB/3SYbC24QutXF65+bN7L99KOxw l+/BsEXThfX5qE6gb+U1OTPw3g+7TJn04ton1Ca0tnOhwZqiJcu+2tWDDUUOfxPz iKfi4oQL0rDk7lqxvjjo4jN15KeDTAq3GTcaSvYGHACmTz8F5ic9RBwcf/d3FqEG Nn/EhDB4ZRI6T0TaVR5K55Exh6/Fi0H7qsQo21r6HmNUD8zK4iCNcQsOjDlOAKrs C/1h7UfKJv9Gptll9VMzlQOJMPrS518fMaCmgmU3wKQp7XvSO5FtlM/nXZmSs8d6 VM+cNXsNRmIKn2AvNIMohCOQVE7VSiMsZ61qqA340qTtZQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtclurQn4zmzzxz7OjPjJ Bi7XQIcsBpWXat9jFlUCSHVXCbImFVECUEo9usUd/Su4PNYe7AIBGs46aVsfx7Av nrTCa7Ybh3euHcAIJV0Qc08Beq2JK00+BWp2qCxnT/YL6zeMKNnVt9n6Sm8U+EK1 YN5GbWvN3RnICe7w7grA46hmIbE1lsI7JfzB57TwmSMpiTWwbYtvPjl4Ia6oxNUn XyVlC/t1SJn7SlvyH5LVvcuIQQw9fIXcczgLy70N+FEJZbxhk51I7jReC7S4fsMM iAEG113F2gb1lGuRlQp4/3bo7PL7h0RgDKaJnIs8qS56FZjVOIQxw0mD4Jog2QPg GNSAWC0meA2hgqqfUe/cgBWBQa3yTf3nd/Zh8qh3haFMf3SaeW9CrA+guePsvQ4J MVu0onE9jYQGf2OyDG9J1nGdQ3g/psYiJsNPH4LKU9Zw6GZxalhcu4EJrvxXXQhJ EEEZwWzBWZMHMPx0UEsisdKoA206g8P1Zi7w8cOZUhdvrApKRYHj2ooLPiOrs8aS CCjnzIzqjGlyxpVDGcakg4AOdDZyRq0l3dv/041act7pUR5yx6vZhIdLACxrYhz3 6FKTSxJumHArAVMh6X8attL7CNnZnLWH8zGY+gMjSYKvwCkhfIXD4L4Pc4w+V35H BsA/SCI6ZXWaHWkokTon/Z8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 335797586492151316964303638746195501129789 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:29:59 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:29:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gianmario.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 741625623973679859821322518722337394086165304453395208483678957306569553621489491050721056672560116458228954193967855995318778600463706712709768592663249807564821883642064706242869656946641069047234575709178703527330689253698509728605949529286814943399520815191041127831523565434527017647893642366170756228530789612337226035445150373516987328649373883338559951168581972288940501496622455338351622056474626299506517712422210307780620568202417202534929721128053667883617639014655731995216986014188287508022019146740941300379525152310803908734656962572630226566241332524262756268072082235464235728596426949852997785132250029885078817543615253376819297898239826321737212654355995158998574139354141855084905619412145295772577714917604109507637555857118913367011936706909127978558809193679747217629986190083411710603015718387032051539393024507491188057115782205555857795987914056432689552634516477524776949322389814634459437917092029655938781038962522582304182705752627399201606163052582864849228255066239759161848844460440282903778612833274504596438323458877555364995913870549475222534318123139244381331070648010630789965558625515350954449733124003492068166498551539095439226590690167576756397586963865132572600672774265840128813863271839 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 890f549c5f2214063d4754ecb2abc7f970302204 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gianmario.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016affb4ca8e000004030046304402206e46e11026285c1d2b21ae38bfb963a9069614907327ed4c384fb1f1f20494f0022006ee8664112b1e26b1a8c7b494c2ff754959102fc22c976c5ba73232a6b6dd26007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affb4ca8a000004030046304402205e69b65955c8b72a66c6be73acb1a4ca731b177181f7e54a8766bc74f14ac49d02202da505e0c610f8313abd19581288b10eca1e7552b1eca6dd57cb4e321f7719bd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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