giaccauomo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:76:32:1d:32:42:d5:b6:06:e4:50:5b:3f:93:12:f2:59:05 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=giaccauomo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:32:1d:32:42:d5:b6:06:e4:50:5b:3f:93:12:f2:59:05
Serial Number (int): 301556790087765301204858250600309314443525
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:05:d0:61:c7:01:25:a6:e0:81:7d:40:70:ff:08:c3:26:bd:54:c4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ee:f0:ab:d1:37:14:21:88:55:e1:a7:48:f4:f2:98:08:ae:8a:30:3d
Fingerprint (sha256): 04:18:39:ae:47:16:5d:99:1c:7b:77:e1:bc:10:ce:2a:d7:2b:d3:d0:b8:ec:15:b1:9c:d5:ea:fb:7d:72:9e:5d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate giaccauomo.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giaccauomo.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giaccauomo.com

Other certificates including the domain name giaccauomo.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for giaccauomo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301556790087765301204858250600309314443525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 23:11:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 23:11:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giaccauomo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767281198250506501268129261101175822658301798249346842668544577138618983849881882843112615253620889926596710433296415100846888598414241299511937129141152974216673803013394174171545211459989024354196082029321377314130662035967669425187498607989325356975084923083339518988316363451613039360863506792052853159068973144679434353769591938586720259315868210730494645102994529364352977571312761041204162759478607884360688004886048650614196527597214962613413970001789939584550776482008445732928922110001035766703055723974485722945402641642907341839923333475396321013387650309246102780492064327589506862691329077275389070318850212949150491881902325530419278502205005275304410204912461398712604066760684594071045301286771630976315331675910774847263177315937414442433143557573130286815664718425115705628157889177380097740402727158765046713816561098920951327233657691770828928785042621458979495587408862243765977457616143085219461672101453691972461874310137811517536595711745774182805788243374481003719984632907577914485814900596071860150493871665606064986487277180530488241614595514728612983561504781952384133218969083553588813978904179255034590902941818656630903986249537404990485845410486337082650159389969131522880051273293525147351445553011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a05d061c70125a6e0817d4070ff08c326bd54c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giaccauomo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018de7e6a9120000040300473045022100fbadbffdfaf2ca22468541fc05f04f9acd19fd457363e646959967d8bb6e4834022021b9d384236a22a5c41f787fc6bfabb6b6e19b138aeb5a0fbdb21d43c6a66778007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018de7e6a923000004030046304402200ef25f0dda370b4f99db48742ceec52ed83c4079eda96e60395f6afc1ed73930022041e55797383d498f76c36eaf9c8662f9adfc1ad2df05507d2e3739f44dd145f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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