www.luciesuoni.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:6b:85:d7:90:63:8d:c7:ac:98:87:21:12:22:2b:1c:c2 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.luciesuoni.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:6b:85:d7:90:63:8d:c7:ac:98:87:21:12:22:2b:1c:c2
Serial Number (int): 308779029140480088096366916300237120937154
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:fc:4b:4d:b9:fc:6a:67:3a:0b:bd:00:47:9f:f4:39:e8:fa:79:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:bf:d8:ee:86:cc:90:f3:e1:c4:c3:57:ca:46:78:ec:4e:fa:dc:62
Fingerprint (sha256): 18:0a:f2:96:1e:70:ab:37:f4:a2:d7:68:33:ce:e2:32:b2:f8:66:f2:6c:41:fe:ca:1b:0d:4e:a4:bc:80:b9:99

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.luciesuoni.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.luciesuoni.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.luciesuoni.com

Other certificates including the domain name luciesuoni.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.luciesuoni.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308779029140480088096366916300237120937154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 03:50:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 03:50:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.luciesuoni.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 671454856175456104968999084559487700403284128419569782342263703920939075251141923818845661121392533157557598874277399342932089445768442875778498598030979068048703693934791921914313259469810054020424283389089060898493040014725584386723694636393520479851014886549034352630721704727090776005180509652670986393142847955921218045035926070562680187433488625332112028671121539130705311697030649916595501736834425306882233993768431340868856901414450426560861344523642966772235322326876203681008017555583601803079967842938091204191713495550856761710724245072441587422432631040459278496830160920780671731778099068299000014820575248520688061212685677131937917104550195191494025389406177098499918061299031047492333025088577993508931580588593659881141570909065889293247737913108965687249526404106560900176046157508080288251443835769548982411534953340399769414454964269463443302135904263348110737457788799724365834551922890603259259317239737156691968154699061925059271154962992244219556708744088399133025908296166452372613110161379978175026146677972637115985633555560759537738947397717319784696658423234452676145521879258971763621844330357398870418589892057736933908371869379749920508052494254539109262096093768742835473881626065145652911226725069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4cfc4b4db9fc6a673a0bbd00479ff439e8fa796c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luciesuoni.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7b5b10740000040300463044022031c31dfb4e4f01de21b08498f489e10f60be49632183f07f4d59e827d41e9c8802204a8f546f8af1567ca07e0a10019630d3e870b1c96468cf79db9f1dcdcc99b7f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7b5b12430000040300483046022100ae8008eccc455d75064cd57ca725d99112b0af8ce653a881692c764324743f6e022100b76cd255693bd86725412ae4d086982a4381a7825a781030900a071f28cea167
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001305ce99bf2135b031c754dcb645db687d8148dc96ecbba3b539e457265f27ca32e13263d8280e7051f3fcbad0c26009a8c8bafc610d15037004e7119cf86a708b688a31397b318d664fc6718fe8fa1219368d788206a3a1f50852b9af23f2e1a27717934cfb43f110244e80278b7cfa8e2f7b0fee34546fc0012180a2c10755b5cdf8462d1d30f4aead7c34e9d3eee14bfd7a3e377c652416a8c1dae761ebc89996ea45dc47bfb9c90f9d84783d954f40f3eaaac9f717857ec9a14b2b3e1567472889953c09581fe99a02d11ca0ca84fd63a9d67188f47b9f181c99853ae0d0406c495a341f1563bb3eb288d0ce64b90d71f6d6fd94e60132f2237b8a8b9bb4