giovanny.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:f6:fc:fa:b6:6e:5a:04:d4:3c:ba:ae:d0:87:92:d7:36:6f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giovanny.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f6:fc:fa:b6:6e:5a:04:d4:3c:ba:ae:d0:87:92:d7:36:6f
Serial Number (int): 432494873218885786335386888181215141508719
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: bc:c4:5e:b8:c6:b2:7a:a6:b3:31:53:06:84:bb:98:54:bc:88:a3:e7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c4:74:00:d5:23:51:70:fc:aa:87:11:64:58:6d:59:d0:76:5d:f4:7d
Fingerprint (sha256): 15:f4:48:f5:8e:14:1e:4a:e5:74:36:21:95:29:ab:5c:83:89:91:6a:4d:d8:53:75:79:ea:cc:e2:0d:cd:c2:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate giovanny.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giovanny.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giovanny.org

Other certificates including the domain name giovanny.org

(limited to 100 certificates)
giovanny.org
www.giovanny.org
giovanny.org
www.giovanny.org
www.giovanny.org
www.giovanny.org
www.giovanny.org
giovanny.org
www.giovanny.org
giovanny.org
giovanny.org
fd2.com
giovanny.org
giovanny.org
giovanny.org

Certificate

The complete raw certificate details for giovanny.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgISBPb8+rZuWgTUPLqu0IeS1zZvMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjMwNjA1NDZaFw0y
MDAzMjIwNjA1NDZaMBcxFTATBgNVBAMTDGdpb3Zhbm55Lm9yZzCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBAKNQhgJ4SYJGGSKAHewLRgGljL1aZLEqLmyp
7iZZQHhG3adcgBpjHjE5KEU3BwKe83+SnDapJhr/spV74uN/+IFCfzKWw8m1kyvg
PW2v5NOYCEpKz9mZceJ0cDg+JKHKTbrcovFT094OP70PV9ZiOosy0PLQYkCxT/u7
q/DXlD50p0XN9ZZvwH7tOyMZX1F9BCIYaacxvLtC6uCitne0wUYh2mZxprRISHIj
u07hleAZXNSViQXZPH4w+ux0yECzvbSSOL7GzXxtl327Y7XO2N2U5+cnSF6vyfCw
1mspfZ6lIm0OxiUMsKJkU2OON6KZxAVgKjzTI4ICUg58klO4pPTPmLjlG1rGDQmw
usUSMY7vQDTpI5FQ5hvv00r7G9/5JvfDMAGC9dll6lJYSIpSb6V2PpCSMGy+3gBc
yIUEsFIRz6ML0/Ydwdyg/vrCrdFV7MACPo72NHc9f1DOK/2qUZvpviW2MVDyGbJr
5rZm1vzc80WkpTS0hq5cx+i3ZsMDF4x2XaGOIyjR582kEAuWw6OV0BI5xO/GAob6
QsxuJsH2aCY2MbrlcTutF66PekZ8lEZOCzbfW7dDT2g0S1V94aaVIdBob6SX/cYu
iH3AMYZgxd8wQxOk0A2bY/wDGeXK4z7uBuwfg8XzIErO64h4ye67+9+hFUVrHygM
fWq+GgWdAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLzEXrjG
snqmszFTBoS7mFS8iKPnMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh
MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz
LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZ2lvdmFubnkub3JnMEwGA1Ud
IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0
dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvMZN5pAAABAMA
RjBEAiAhsZvwgHMbnb8uQrSTHsA+b6nWRvB/kT74eqs41mSTLgIgXg9gQG9oUXei
h4ZQGmk5b9z0U9GtWUL0Xy/xE2bM1OkAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6
cOeySVMt74uQXgAAAW8xk3mZAAAEAwBIMEYCIQDJNPYNTLFsBiEXFFI5ssURvet3
YiLyUWnIFGQyxiLPQQIhAMlTSsKnKVixazM0V9IoBgzEbuxReHrCt7l8NDgEmBUF
MA0GCSqGSIb3DQEBCwUAA4IBAQB2i66GKFloOvnPxRMWVhOXMMcim5nPH+TuQ2B4
+KHMo/obkDsx+fqiC6Ma9c+xpt1v5pQYKDjm7t95qT7J63EaZkWQdVP5KTtulMjy
pJeTd7Xu7LDo8JiXajdOg3RAqeCZL9ZxtyrOPAuxDZdaojQOa75z0zaoMnU6SJNc
l1AV/id5Eaz56jM9vxNxjlOVt5HXr3GFRmskRP8LPo7XzsaGf74ooOeG6gQni3kw
nIQhnw7CKG0ZOY1ptnoVkYFgDdR+6ot6ULa93Q7/2CG7aU6KRoUEdTy15T4HJH8S
IRaH8e5bcBMwE1kF1QHAZPP5VLztqkkKiuVkDoR3pgiR1oPb
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 432494873218885786335386888181215141508719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 06:05:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 06:05:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giovanny.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666265214016515201014020047029205612374466524477539892350986564567009475293172234868649699811708495956912808996017757403312723050489157778034779992987562492374915225482949846091296773489440556116959789631796708041649651389832394389137919284616951747654546527807915156451450620887064460413551207222249165579471467884421473803536895189925735519031207285322025266664030260208596539407178375885164772992313704418744233926903579527479015542384846940819658801902194312042443829522637595168658948909782102292787270515198421186878628239942742007359318990431861691178917037613409281846652173424007552153559223408848049683180079618680720748620931141979564676798829002865415631996220861096298794336244371785462952129762480492214580670496967243851358345755530483165147292173197126519764729851429590581595781127098990112197327582704719606206718825400293787119362645803878918813675627078752295230693722008649647737046341225488851133841326919833289204955000956030966640320506099922243611281146329124399215459873338649477783003910432291998622226457943957685792024768466507501192928728673214888438580782065966229487535267891474079230259140154357828127929571541710728956908127648224855188526875493376449522692411008945211776793441168847566186162554269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcc45eb8c6b27aa6b331530684bb9854bc88a3e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giovanny.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f319379a40000040300463044022021b19bf080731b9dbf2e42b4931ec03e6fa9d646f07f913ef87aab38d664932e02205e0f60406f685177a28786501a69396fdcf453d1ad5942f45f2ff11366ccd4e9007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f319379990000040300483046022100c934f60d4cb16c062117145239b2c511bdeb776222f25169c8146432c622cf41022100c9534ac2a72958b16b333457d228060cc46eec51787ac2b7b97c343804981505
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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