ciaogirl.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6d:7b:e5:66:93:07:7b:cb:da:8e:f7:b6:61:14:2b:54:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ciaogirl.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6d:7b:e5:66:93:07:7b:cb:da:8e:f7:b6:61:14:2b:54:89
Serial Number (int): 298592321949579817102957523487282109830281
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:18:27:52:99:04:16:7c:be:3e:c9:88:eb:f9:65:9f:81:0f:24:69
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9c:63:6d:78:e3:cb:13:2c:66:e3:40:f4:94:1e:4c:f7:c8:ac:a1:e7
Fingerprint (sha256): 31:ee:5b:98:88:d6:fa:e1:61:fe:97:36:80:38:8d:21:1e:fb:56:bc:37:20:40:45:ab:f4:98:d7:84:e7:c8:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ciaogirl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ciaogirl.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ciaogirl.com

Other certificates including the domain name ciaogirl.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ciaogirl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298592321949579817102957523487282109830281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 11:19:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-10 11:19:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ciaogirl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 778438477547959415805810494280689341836288077983317137402807187815752770658926986777979108497994743572417507737927409906451255616205379447823579736743604869135781636249005689409441951122373799227330122015788381464716604450527310305421609332264719997210983900864602057348903901454900686623518664431056265331394246776987382296278033958126670627743111241441524214357197139508266631492962797209174168338824593059543292212216953120262768217633666079587843617667551349031678677919463868342371416372365864779383647813326887091046748903942983892463995631850697752548332984303756531615766046672894841627795375068801428682443270771438197761768866704739703946150159421889081914872099975821928511198041030383270123964323773486596015871769406654144352791179449420113971144342803299184249710071681697533767854930825048999552939600100525782240418602511831067918199673415725932073615208762054071635690052601947032450951558903649432018419879697365918339540154365469166986319280684535923537852366037741535135617633067759728674336410815125111238095178475201828339666499781313025121746524704232355596525602283942943575937004826793753990518695563346202359127601594382771329632756927240682365902250704950441755659601726867910742648100901558877242870319723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							091827529904167cbe3ec988ebf9659f810f2469
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciaogirl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170ceaf17f30000040300463044022021377d651ea21eb4e14c6a905d19233a19fef3cbd44e859a7a092dcbae88129d02203102a10aa61fa12bd2651f7cc5b022fea0852e5ae14ba43bf58868d8e94cf81f007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170ceaf17f300000403004730450221009e069ee435dcdc7a517d86478a8039e710fff491526fedfadeb435025e1e773b022061f2d896277cf6213b4eb46c123f98dcf67a296cb71a61b47d99571d657bba27
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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