www.curio.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:bf:e6:7f:79:74:18:9a:34:73:f0:c9:ab:c4:2d:68:e1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.curio.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:bf:e6:7f:79:74:18:9a:34:73:f0:c9:ab:c4:2d:68:e1
Serial Number (int): 315356551129749956440723174566485228873953
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:a7:b5:e0:cf:f0:d4:09:aa:02:50:a5:72:89:be:8c:d0:96:4a:d6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a5:cd:73:e4:77:a8:b9:fe:09:7b:a0:84:13:19:76:54:50:8f:91:69
Fingerprint (sha256): 08:fc:93:70:88:30:2c:1d:6d:bd:35:cc:1d:41:e0:41:9d:90:b4:69:f6:7f:b3:61:e5:b1:9a:9e:4e:ef:b9:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.curio.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.curio.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.curio.io

Other certificates including the domain name curio.io

(limited to 100 certificates)
www.curio.io
ask.curio.io
www.curio.io
curio.io
www.non-judgementalhealth.com
www.curio.io
play-dev.curio.io
www.isacampillo.com.mx
curio.io
www.devfestnh.com
augustijnskeukens.ziggu.app
www.curio.io
curio.io
curio.io
www.curio.io
kiosk.mychronos.app
staging.signin.highmark.com
*.curio.io
*.preview.curio.io
*.curio.io
api-dev.curio.io
*.curio.io
*.curio.io
dairygoatmanager.co.uk
www.curio.io
monitoring.curio.io
parent.kidletcare.app
sb-m.co
curio.io
*.curio.io
go.curio.io
try.curio.io
sanchezdiego.com
www.perfectplaylist.app
curio.io
go.curio.io
*.curio.io
www.curio.io
flower.api.services.curio.io
curio.io
curio.io
www.optakit.app
curio.io
curio.io
curio.io
airflow.private.curio.io
www.non-judgementalhealth.com
www.curio.io
widgets-dev.curio.io
curio.io
admin-dev.curio.io
curio.io
*.curio.io
*.curio.io
www.curio.io
www.curio.io
curio.io
app.nuop.com
curio.io
www.curio.io
*.curio.io
curio.io
try.curio.io
www.curio.io
www.curio.io
lalysavatar.virtueandtrade.com
www.curio.io
*.curio.io
curio.io
studio.beta.curio.io
sanchezdiego.com
www.curio.io
tsumoney.app
links.curio.io

Certificate

The complete raw certificate details for www.curio.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0tPYmYPFgKBx9FUJvbeY
J2nFVPEw6Vn+UNY+jkdsKKSVPBYVVb5jkJ5kW1oTR7m8+CbyaEy94NZEnW0F99oS
IplSADW3g5+EqCZZYrINBLA131OiIVbQCZVgHaEj4EmIroaKyfdaDKFQWojXu7zD
AFB8O9oIajgaazeftuATkAoxl0wZGoX1ohxcE0gnzChYS/2c3bz75tYvU8N/K0xN
NJDzvyJzo1PcFx7fD2m1lB9wmDQoqWF8g9WFDMUQBpihlhFF9YKJgnUCmeekBjOx
OVzthn9rPcTDB85Q8yTe+lbPxpS7Z1HXfsRn9bM8vMcjNCLQN1iyI2/xsNYsEb+5
blDFvMueRbPxcR3HKukRZRdsuwLREgPu+GAqBDGDx8/BlvrqesAD7F7QoL7UB8wQ
ETzBsgv+2l9hctsVopbTCpsPNnm9AV0HYNL/ui/D9uDQvEE9KMkgQEqLX3Se8YYj
3cAtXyZzZPiYkCzc6+qHXLks6sKOgs4F5PGSghxnZEPMIhDDaY0t5dqFaTSEshnF
vtEdp1U/zSR5FtbO8Tw0BvGvuYKIW1ii3ZAUrLgYPZ/M19wrKoiIbzU2ITDofNjP
1MqtsYKnAxH3cT9cWunGhscYhiLxVDkjItj5eNlqdhVjr33HxM0FXLDhcBq0Z0z/
zwvW7hluNmiHIJzUuwkZbFUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315356551129749956440723174566485228873953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 05:01:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-07 05:01:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.curio.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 860101256840447284653046729897927851476253400598435732849866311358089764375612676778453469364607292287997469685082386310440113106662670853709842344513253708774402339420221959187497144263661494544262750046769495916695058067389213453140359859175480767170771800603669610888588718122676378050226908588804030220865168967294845274080557702895426505422368039733662772536634008933164028068353968055450973374116925205983171190288178288080953195238836749063832743717110183298337969101887472200584330205884153378617393166217339863534242461475206756331003876944052765758139448885556496508039114912115582933632449466631290224976888931785194400642337878688937597079330415304343829413065447277322596101960125047320526967506041430895855232613706697858151756132996034202272270249256548196411937847729946903104712889291691728555744637029210718812432988505295835642343118508247597749927621762855854085067745652117978265922443430569729682835784203216533210505105688655838393427104954925494805104396739001774603907045815924321135500654702049584765421133424201850649884355958636270649987285159216957666162485798489691125498107180269598637602355170215597998204257323875204369457621715057066330190482565160687802384657318819308267453720594815283644205722709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02a7b5e0cff0d409aa0250a57289be8cd0964ad6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.curio.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016826e6aa6c000004030046304402203db95ef3fc4e2181cc47392cfce9b6870bc0032f1b12ba8c9a961bfcf6efa2ac0220408d737d316aaee5ae39db8f03c3173a1d678b4b5c8a446ea2ff63b40b13054f007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016826e6abee0000040300483046022100944fd5ac8e1a0b76b7375f6a6961ac8589011576f7d73e1b3526e06c40f4f2b20221009b69328ff102cd018e15a9c287596be0e7a58851ff60f9f161ea9ca413fc1eb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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