www.giocondo.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:70:7a:9a:af:44:ae:2e:60:41:54:dd:39:97:8c:5f:a7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.giocondo.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:70:7a:9a:af:44:ae:2e:60:41:54:dd:39:97:8c:5f:a7
Serial Number (int): 332945664981799732049034695230299178819495
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 53:ac:f7:2a:25:ff:36:61:62:52:e0:74:65:12:51:5a:60:79:6c:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ed:89:16:d2:b8:5c:2d:e9:34:34:ff:f7:84:d0:64:36:0a:09:3b:2d
Fingerprint (sha256): 14:ea:04:52:f2:3e:f2:bf:e7:4a:7a:87:1b:2e:1c:f1:60:b7:56:73:88:ee:ae:64:9e:56:67:3b:43:f0:47:7a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.giocondo.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.giocondo.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.giocondo.co

Other certificates including the domain name giocondo.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.giocondo.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgISA9JwepqvRK4uYEFU3TmXjF+nMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzE4MDVaFw0x
OTA4MjYxNzE4MDVaMBoxGDAWBgNVBAMTD3d3dy5naW9jb25kby5jbzCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAKZenIbDel942F1u4zC3cYkvsb8cvcr0
DOWIaQ3OArEie/yj/GqQWhbxZG8uSQ0Gru/hlsB7B6rfdzXFvHwlO94kFwhJVw3/
gIOx5wQa7FNH5iiNOEoMBfHDt/mKqaRIUJTOAGwB0oUlpxhmpYMaAImCvRbF47xb
/gFpHl5chBYz+YYNNBMRHkRyU0LRYwQTcsoos27RGF2KLXibNqEl5B2Fzgv/rVOW
ANfhzDGeqhiKLBviekwL3LI+aGHpx9HY0BgcsaORRzM0ano0IN2rLT/dw4PIO5xR
CXrI4teCsCws+leYLySNm2T1+RNGsJyvwfy313PbFZL9w+N98+VHb5CO7Ui1fPok
CVrmQMabqudrr3qOtg2X+XnYkowdvUa/SA/sVxwhhobKUx43ISkk9DGIu7NtP5+p
66hnkk6xXcqR4Tb/MUFDh0pfTGth9i1lCZQPWj9p+qFEH9UuARaMUHvMro9BE9fy
u4mcHQLKg7utpiUsncsXAguGocZA39QWHkudhq3Kxiwu34Hw8OB5OaXA4dyvrlSL
Lk46cv1+Ry5VONk/LFvpqVCHF7NoUUqSGI2OKJi4mExm7lqsfyfQQYbWWvHcKD+V
NCGanyDgQYdxmoirk44jXodU12HSgFu3/mo/jSMsz3VTdWBq45WszFrVHp/VNYes
b7FHfs5FSMqPAgMBAAGjggJjMIICXzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFFOs
9yol/zZhYlLgdGUSUVpgeWypMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3Lmdpb2NvbmRvLmNv
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB
9ASB8QDvAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFq/6nm
nQAABAMARjBEAiBxalUi2Rf9I5mF3erpL36b+8fxtY8UhCOy3/o2nRFDBgIgMnNG
645Gbd+tPOW0MvGh0PGJLiGEshgRr9CtB9LcBawAdgBj8tvN6DvMLM8LcoQnV2sz
pI1hd4+9daY4scdoVEvYjQAAAWr/qeiyAAAEAwBHMEUCIQD5wYaMsUjuE53nviVs
rxnGUgC5pvxccPiUEbyKDVp5XgIgSQZfcq8tQDkf3IAsxkkycwAQDBOSZqdtIOHY
/1FzOGYwDQYJKoZIhvcNAQELBQADggEBAAf/rBaiyQlZuljynDQkcWQvsdY8m6uj
oZoirahOTjc1v6lm6vO7wCQoqHx6PrlFV9mIMziVjuaHBCKIZPUvtNdeXoZiSrs7
q4EDOStpjNhSHgPa9ltp6eUB8hNxcZ/yh9KVUvxUJZTMCEBV24ZkF9w1PwQS4TQO
4Z8Q4w4EaWQrTBriWDSsj/N/x476AmZbxgpb/Y8vtroHcW0GLbywFkpzqsvs+WGe
pxeKTVhEUjFeA5zl0iKHa2Ae6NSXzpTzpK//jGVqAj6gFyNJPqaXUWJ01bj8xrVV
2+sAU9GptK+MR0RuXTPxSCmTLa2hGqLOzHXm8qYdU0b7lui/i7sWD8I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332945664981799732049034695230299178819495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:18:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:18:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.giocondo.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 678728653434266032026289333102407837566505042695465280436132848391651930190473484737180881228945672267466579997137338264711915615035710063177872146996007741016539688254608312298680229569962184889304253995844940931436525819907758281116147528422765791575401197175931311523193157906011197726660870210426516361255183458626602533614512636801796758407332621676428387879230296739161635453350205568908106466096207693367498186757663472229882252072036310668831095032111877600071669051346517508351940618999606515231542044359886266559699128939856259247396840023867587683093066790870544282501661473716833072839362676716993118118244585288492525715339382800466964525620931975827122848564335879255875979796354571264347594288890680136732917242264479104182533385891166115640639876665096167103879812895918700654531930477514353756672009884307413308118538049227026463813776889604057133089484643576156013001100827008669980950629809636589775756576283664859684211276094520169412171998832740947532798411272718690787153862784759561888920195280240597957453128801061294920134953145340987817186001366028200187032610779583447259661992672202354032970909766037761581757635106240779660818492162923732496153137197088429970589185601452119738033661572271168885354973839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53acf72a25ff36616252e0746512515a60796ca9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giocondo.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016affa9e69d00000403004630440220716a5522d917fd239985ddeae92f7e9bfbc7f1b58f148423b2dffa369d1143060220327346eb8e466ddfad3ce5b432f1a1d0f1892e2184b21811afd0ad07d2dc05ac00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016affa9e8b20000040300473045022100f9c1868cb148ee139de7be256caf19c65200b9a6fc5c70f89411bc8a0d5a795e022049065f72af2d40391fdc802cc649327300100c139266a76d20e1d8ff51733866
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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