www.giocondo.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:88:10:89:12:18:56:0d:11:25:be:69:a7:1b:ee:d1:e6:59 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.giocondo.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:88:10:89:12:18:56:0d:11:25:be:69:a7:1b:ee:d1:e6:59
Serial Number (int): 307637239056142029170171397529654627788377
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:82:f3:a8:21:cc:70:bb:11:66:34:80:f9:f0:9c:92:9f:dd:51:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 54:5e:d8:06:62:81:f8:9b:b2:87:8f:c8:f1:6a:0b:37:44:2a:4f:bb
Fingerprint (sha256): 35:e1:f3:f2:b4:7f:86:68:8d:eb:3c:d6:3c:24:83:91:4e:ca:d2:06:00:e5:60:03:50:e7:6d:e2:65:df:4c:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.giocondo.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.giocondo.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.giocondo.co

Other certificates including the domain name giocondo.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.giocondo.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 307637239056142029170171397529654627788377
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:26:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:26:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.giocondo.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 926026067293968394352923351184161322796840953355532648259648475691092347790725585369751479735007234909681673092557347253985229939434828598905940324795152042703227662155607347124540995584147564998053635881832835048057897029501723352658541057059043258781155622554012279974334260767743565378407447988831931845497542921895251298227439210631995032412587980703889124839214086627483728867582716539325035193978419239493692323643397870826522806466813581833014300211712428977182845588743794290181267410499577313673310862866677412189214147999436945547258157090049882888638076436401327744076790402050971292368169046133567408414281643570841781503436705489537183270271765631448036548089946310293517996117295166839408421508721544348124327137431596795959684684208786609324106938294827508982823242623654428224262017108690552647588575459804244024086069427361011752704285195415751992894686900990082785795105830473698665382466203986159322576734963373289207372220228476791548546703794689305691915331919078672101678252166944018324755351372642010500268763144942554937848217461230383491556007339306339651537100269056311307718764836561416709068029603735154209899743222721768811049129267635949020862144158923917575358076818152487867161162931844776099981628749
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec82f3a821cc70bb11663480f9f09c929fdd51aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giocondo.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b1f3bc90000040300473045022026d5035a654b413b23875ee7f1d3a2684827e3c40990eec1bcfbc28574abf617022100b53ee43169da7f2ce19e5f9f6f90a413b5f8b91dcbb546cb0941692c3634324300770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b1f3c030000040300483046022100ba05a3881917b526f26d76fec1cdfe525975574e19ab351d2217e68255343718022100c9f393bf30597fb112b078963874a3eac12ca4bb1d7aaaf91008e981352d0eb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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