www.carlofrigerio.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:df:e0:2a:fc:2a:5b:35:17:31:3c:0f:a0:3f:aa:a1:51:39 was issued on by Let's Encrypt.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.carlofrigerio.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:df:e0:2a:fc:2a:5b:35:17:31:3c:0f:a0:3f:aa:a1:51:39Serial Number (int): 337517795880696927174799965437043146838329
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: dd:d4:f9:af:12:a8:59:99:53:df:07:00:ec:4b:7b:18:62:b0:0d:b4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 76:de:e0:e4:92:14:a1:c4:94:bc:db:a7:93:91:03:72:f9:0f:e8:a5
Fingerprint (sha256): 2e:e4:6d:c2:86:80:7c:41:4d:1a:b0:80:6e:fe:22:b0:b1:3e:16:ca:bb:e7:43:f9:72:4f:cf:7c:f6:84:34:53
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.carlofrigerio.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.carlofrigerio.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
carlofrigerio.amsbustovm1.a2hosted.com
mail.carlofrigerio.com
www.carlofrigerio.amsbustovm1.a2hosted.com
www.carlofrigerio.com
mail.carlofrigerio.com
www.carlofrigerio.amsbustovm1.a2hosted.com
www.carlofrigerio.com
Other certificates including the domain name carlofrigerio.com
(limited to 100 certificates)
carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
carlofrigerio.com
carlofrigerio.com
www.carlofrigerio.com
mail.gma-steuerungen.com
carlofrigerio.com
carlofrigerio.com
carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
ww2.carlofrigerio.com
www.carlofrigerio.com
carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
carlofrigerio.com
carlofrigerio.com
www.carlofrigerio.com
mail.gma-steuerungen.com
carlofrigerio.com
carlofrigerio.com
carlofrigerio.com
www.carlofrigerio.com
www.carlofrigerio.com
ww2.carlofrigerio.com
www.carlofrigerio.com
carlofrigerio.com
www.carlofrigerio.com
Certificate
The complete raw certificate details for www.carlofrigerio.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgISA9/gKvwqWzUXMTwPoD+qoVE5MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMTYyMzM3MDBaFw0y MDA2MTQyMzM3MDBaMCAxHjAcBgNVBAMTFXd3dy5jYXJsb2ZyaWdlcmlvLmNvbTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOna4t6V57AC/KlkJwPPugp/ 4pRqnqcSmdQsav3AUpVgM8AFggIFTUnQIcfxIT5MIy73VN4+rXAYe6PJHU3H1LXo tiptp2EgwbsYgP7fPGwOWqMdvTJ+bAQZ4JQNGTtcHw84cTonkpfe9bwe2xescnaO S/CIN7wbCWhkJR0i96OmXtf1cHM0mG5gOW3gjwyYE1iMrOO4pqcd6r/qgE/wuqXJ flOOmjItegjAske+351aprQrOQ172hbGNhQFJRSJRamd5AqK0Se0MJ2fWxGGEpzZ mIHbpEnzzkHP6SficW5pfWEQWtCvJAlPr2iDRvlYe0JXHqEx+q0CPifFUg5dbGkC AwEAAaOCAtkwggLVMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU3dT5rxKoWZlT3wcA 7Et7GGKwDbQwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu Y3J5cHQub3JnLzCBjgYDVR0RBIGGMIGDgiZjYXJsb2ZyaWdlcmlvLmFtc2J1c3Rv dm0xLmEyaG9zdGVkLmNvbYIWbWFpbC5jYXJsb2ZyaWdlcmlvLmNvbYIqd3d3LmNh cmxvZnJpZ2VyaW8uYW1zYnVzdG92bTEuYTJob3N0ZWQuY29tghV3d3cuY2FybG9m cmlnZXJpby5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEw KDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgor BgEEAdZ5AgQCBIH1BIHyAPAAdwDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCo qo6ycwAAAXDl7BllAAAEAwBIMEYCIQDCw2Imjl+8qZ6OWmnXRxJBD2huHSEpKB4Q iDsMRScfgwIhAKvWUyQVFd9oLbXaopKXtq9+Tu3S9MdJrT4TqZXdu+OXAHUAsh4F zIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFw5ewZWQAABAMARjBEAiBh MyBTkfswWGLgOmcH36mzys3Qki5C6KYkOU5pcUzZOwIgd7zNfG/IB1E4TU9iA0M3 rII4H/1jdCVFTOdmyjYXns0wDQYJKoZIhvcNAQELBQADggEBAAdeRtiMbjqkEzko VhTknyhmHLU6ls/ZZt8DqC80yOmCH8Lxr46ao5UAxhWkJuhBDhNfZwEk1iAKYVg7 NQ7es9SkfBgTqLGFm6xRTazVlalRYQng9IjHM6flkVZ6qGYz/yNPpTm0fn4lNfBV KRuqzdWAcgY667LB2I+o5bzNkmYTSk4XIqA+0/zFKZ8m29+mAuvgXol+IMojyFJV tpKPIDceNBBxAVC3Um9uoWwNYboKXrUh8RDO8sFbxcuaQXy+CwxPsHns0BhBfE9a +nU+q58S9cuLbvSZSH8hM3Up4hXifyDQKcLEhaSvCZ2SG+59U3DDamLuCToVyPZv cbxM/LA= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dri3pXnsAL8qWQnA8+6 Cn/ilGqepxKZ1Cxq/cBSlWAzwAWCAgVNSdAhx/EhPkwjLvdU3j6tcBh7o8kdTcfU tei2Km2nYSDBuxiA/t88bA5aox29Mn5sBBnglA0ZO1wfDzhxOieSl971vB7bF6xy do5L8Ig3vBsJaGQlHSL3o6Ze1/VwczSYbmA5beCPDJgTWIys47impx3qv+qAT/C6 pcl+U46aMi16CMCyR77fnVqmtCs5DXvaFsY2FAUlFIlFqZ3kCorRJ7QwnZ9bEYYS nNmYgdukSfPOQc/pJ+Jxbml9YRBa0K8kCU+vaING+Vh7QlceoTH6rQI+J8VSDl1s aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 337517795880696927174799965437043146838329 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 23:37:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 23:37:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.carlofrigerio.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29521461869553539943807603234313636335759258548514024984011544879318507666390360177323611622443542771859499631968494151481308561071012701336519234131248668321659997027937506472357901436281565779629492887295380214906520632932492045665895202665704084274615277424298676302955152723297812588436677093317746767754411614538093477803737115842668845517251027030189597569353594786608743750230876521890698566784022202759684014311198355632556630263344526963230609505213063585372637904181097323312365272131955995150423695502457318333315747245904193315987938108711176078986594600158483526289670522703322957657005343847002947808361 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ddd4f9af12a8599953df0700ec4b7b1862b00db4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carlofrigerio.amsbustovm1.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.carlofrigerio.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlofrigerio.amsbustovm1.a2hosted.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carlofrigerio.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e5ec19650000040300483046022100c2c362268e5fbca99e8e5a69d74712410f686e1d2129281e10883b0c45271f83022100abd653241515df682db5daa29297b6af7e4eedd2f4c749ad3e13a995ddbbe397007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e5ec1959000004030046304402206133205391fb305862e03a6707dfa9b3cacdd0922e42e8a624394e69714cd93b022077bccd7c6fc80751384d4f62034337ac82381ffd637425454ce766ca36179ecd . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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