www.gioiatauro.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:31:6e:db:25:d5:38:16:39:ab:28:e7:b6:ce:07:9c:5a:74 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.gioiatauro.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:31:6e:db:25:d5:38:16:39:ab:28:e7:b6:ce:07:9c:5a:74Serial Number (int): 365270332666057443149371387454429073267316
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: dd:e5:5d:e0:91:3b:dd:32:43:5f:fe:45:f8:ea:91:57:c7:9b:a0:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 6d:a8:c6:4e:f7:f7:2b:27:c9:36:09:47:2b:1d:1a:ba:88:a1:09:32
Fingerprint (sha256): 2f:13:fd:31:ba:e5:08:d1:4d:f9:e1:a4:0d:8e:fc:13:ba:b0:ab:09:a2:88:88:84:6f:e4:9e:30:2b:67:9d:ce
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.gioiatauro.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gioiatauro.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.gioiatauro.org
Other certificates including the domain name gioiatauro.org
(limited to 100 certificates)
826.me
gioiatauro.org
cowboy.exchange
www.gioiatauro.org
www.gioiatauro.org
www.gioiatauro.org
gioiatauro.org
safecasino.co.za
www.gioiatauro.org
canyonfloors.co.za
gioiatauro.org
www.gioiatauro.org
gioiatauro.org
www.gioiatauro.org
gioiatauro.org
gioiatauro.org
opportunitiestoshine.org
gioiatauro.org
gioiatauro.org
cowboy.exchange
www.gioiatauro.org
www.gioiatauro.org
www.gioiatauro.org
gioiatauro.org
safecasino.co.za
www.gioiatauro.org
canyonfloors.co.za
gioiatauro.org
www.gioiatauro.org
gioiatauro.org
www.gioiatauro.org
gioiatauro.org
gioiatauro.org
opportunitiestoshine.org
gioiatauro.org
Certificate
The complete raw certificate details for www.gioiatauro.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISBDFu2yXVOBY5qyjnts4HnFp0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQxMjQxMDhaFw0y MDAzMDMxMjQxMDhaMB0xGzAZBgNVBAMTEnd3dy5naW9pYXRhdXJvLm9yZzCCAiIw DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMl7o7yu8mpgs/T2jFK5UMvZOQ/A UdkU67yrFo2XV522XoK/JwGzEV8NPxsZGoLWxmgqxHXbJCMHS/22CVVaEfGUOzdf Ua2DLDhW6KcyDqkJkHrKvVnm/hmI7G0KaM8whlqh6R8nFyyXcHpZAbr15gtaKaJK O3L8L7Qb4FF3hEr348AhBOQ1IVKrTu1+vq/MhdmJD5LiYKfVLNXjks0VVcrLz916 SL5tluLg8G+ds8zGSWYmvqEOMQpG89OrRtUS5MJ3konOHNtmo9xzwePW3YmyuIuA j2L8WkF1s3dgrpaYEf5EsJV+vL08pZ7f6UcADVb/iS3R+koj5bai0CwIPnJJ+Vuc 88d8qVo8xdLobTmNEfuC8MrZOtIza+bkwvTqf8EDGBRt+Rz+aRUWitSUKpRlDABe BiUR7THSLWPRYM6WK88nq05v99XJh5SQwoSrLIwBhX/Nfe1Y4XPOV+JH6f8tCBUc 5LX2pogQpEctm6Bd8uW4+dtNsuugjr98ORZmyS/MtPsK1gwYDBG8Q2XO2g7mniGv H7NWQI+AUPCldXb8FCEjOeKQJNatByDQkF3m/zxoF4OftbatTVfkTgFUQ2qq0Ofz 4PuThJHPUIuEysTtMH+7vULZCW7/VHv3rjUFabEiXGqS89KZHoiAL6PNegmyFF8h FSGrjrWyqTuDfybvAgMBAAGjggJmMIICYjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE FN3lXeCRO90yQ1/+RfjqkVfHm6AHMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3Lmdpb2lhdGF1 cm8ub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUAXqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgA AAFu0SSg4gAABAMARjBEAiBAbKMHjEG3ndqo+AjoTdyI7m6F1gdAfYkD7uoNzOoX HAIgdEfoHa8lrv9osIee3sQyqCL6fVLE0ecYoWR/sHee+64AdgAHt1wb5X1o//Gw xh0jFce65ld8V5S3au68YToaadOiHAAAAW7RJKEMAAAEAwBHMEUCIBd8ya4cE+E9 jt01JI0aKakTjHKDkQ/MfcprusoBn1MSAiEA6pma0nerFoMPQoBB6XqbkFCcEcGZ J0eXDY5pkUw78EcwDQYJKoZIhvcNAQELBQADggEBAGENHmT0TCMtvtT9sf1CFeuL pZRCmXaj/4fPcOD5MuKNJ1e+BYUA3jlKcXqTHOoHY4Ih5SuUda648bJaT0OjPjnl AOQIvPCq85lFNLpjDniXvsbD6tQRtt3n8yALb9prq5Vdkz305MrCFFmqRzbT50mw y4mUbqKQo6t7yfHoSaaGmdd+94Ize5T2nYMAdxQJtRKpsI0E8Ye9kpdunK16KXjx aLhzcd6KV/VBl4MFxJL2rxbhqVlSUjigTfmoeJXbvxYMVNFnKRuOWrHOEGi8wKcz pvCNIPsDE3H7y+g5Hl+AQZnJOFyMcAO+T8rmw/nlqKuDKs4wliDepPYIm0590sU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyXujvK7yamCz9PaMUrlQ y9k5D8BR2RTrvKsWjZdXnbZegr8nAbMRXw0/GxkagtbGaCrEddskIwdL/bYJVVoR 8ZQ7N19RrYMsOFbopzIOqQmQesq9Web+GYjsbQpozzCGWqHpHycXLJdwelkBuvXm C1opoko7cvwvtBvgUXeESvfjwCEE5DUhUqtO7X6+r8yF2YkPkuJgp9Us1eOSzRVV ysvP3XpIvm2W4uDwb52zzMZJZia+oQ4xCkbz06tG1RLkwneSic4c22aj3HPB49bd ibK4i4CPYvxaQXWzd2CulpgR/kSwlX68vTylnt/pRwANVv+JLdH6SiPltqLQLAg+ ckn5W5zzx3ypWjzF0uhtOY0R+4Lwytk60jNr5uTC9Op/wQMYFG35HP5pFRaK1JQq lGUMAF4GJRHtMdItY9FgzpYrzyerTm/31cmHlJDChKssjAGFf8197Vjhc85X4kfp /y0IFRzktfamiBCkRy2boF3y5bj5202y66COv3w5FmbJL8y0+wrWDBgMEbxDZc7a DuaeIa8fs1ZAj4BQ8KV1dvwUISM54pAk1q0HINCQXeb/PGgXg5+1tq1NV+ROAVRD aqrQ5/Pg+5OEkc9Qi4TKxO0wf7u9QtkJbv9Ue/euNQVpsSJcapLz0pkeiIAvo816 CbIUXyEVIauOtbKpO4N/Ju8CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 365270332666057443149371387454429073267316 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 12:41:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 12:41:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gioiatauro.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 821978791858996804041376657651450773147667595265659108426485400682735776940539626987999127316407915351911077243636666360119325808412446885177683650792879183479292529819117114388288692922279100932152469374471972212586467782710225774608852880823836037991260675848239518674218845328302863252656970411674249434737866396121953782273098742225676911153673191687841891170181218515014953202680539622542882880695885154033964589470096000848277087598197168504052763082788528387371760207847547899799247087355997509324988052821183843880789938357993637454180539000218918887627262520290019961112606240867375891172386448026330601093131151754614037442348608183458537524385666185049503498479193614650876247772104701860166835057684484828469221874850752380047746626078125450860834649370275810092231678105095042754548606062349849153420754230690396530760890428896148435445645819361628288167239554390933675228740097234043761621035463296982889120506730749386034045134847648542184538924563459097820945670784847977206220113593267282460215102009735968404359292607669230107128644606048488492623157992262596602822283263136647500906326569279822027420739306500496451679736154124707267928938506181786406366720670046737223937515583565695143693370261617241457824835311 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) dde55de0913bdd32435ffe45f8ea9157c79ba007 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gioiatauro.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ed124a0e200000403004630440220406ca3078c41b79ddaa8f808e84ddc88ee6e85d607407d8903eeea0dccea171c02207447e81daf25aeff68b0879edec432a822fa7d52c4d1e718a1647fb0779efbae00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ed124a10c00000403004730450220177cc9ae1c13e13d8edd35248d1a29a9138c7283910fcc7dca6bbaca019f5312022100ea999ad277ab16830f428041e97a9b90509c11c1992747970d8e69914c3bf047 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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