www.benvenuto.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:83:4a:78:8c:1e:37:8a:2f:63:a5:a7:0f:d6:e9:56:02:ba was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.benvenuto.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:4a:78:8c:1e:37:8a:2f:63:a5:a7:0f:d6:e9:56:02:ba
Serial Number (int): 306012836651166164725238536626130996560570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:3a:65:49:11:b0:f5:67:7b:64:fa:da:b5:9a:43:42:72:38:72:a9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b0:c9:45:4d:6b:68:ec:ef:1f:39:ba:2e:cb:2e:9a:62:e2:0c:dd:79
Fingerprint (sha256): 49:c9:d1:56:92:9f:d9:13:b2:d7:44:8d:c4:34:42:22:df:7d:60:25:7b:d4:f5:43:be:d2:d9:91:d6:ef:02:9d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.benvenuto.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.benvenuto.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.benvenuto.co

Other certificates including the domain name benvenuto.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.benvenuto.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 306012836651166164725238536626130996560570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:47:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:47:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.benvenuto.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 837522178260984883312931915557225949128590158937784926344665927633858804141929828992015437692037824476192416128602508377090937170675604126252805873187042089336003662618812861193953889466201188295161633452963028580949348072209464891115809871201095216458552368486816197316201125490899827320529337922896703590277222330098116863723318507162411654096225689080580677850450747090621816669699620763804266826966134883784735737045952747189657347156177112859020960842901047185349443305044526497892682712413054571315384843623574083201151164733288614784348896251240212429902168091782967556562314240673677797144869622908986160116657907537849105937875944525781244788751652771019955827625663220707106674650985948535695388760106076315088767082718526051646006149237709069018021416709867933738539449395858886005101507471482719118008315553769584655993546231117215586753482277379539174063989004800327795392550495038694321315237672809966179500722951069626972571506800832490917117328888289081368229891359428456670174445997426870426777960048926164305941107412016756792212233835562094841935882694857352210547125867646684118840736494295109338158718199992378949130836889208931191922592988731319135396681808526231602168739955995023272731712687138425105524202563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							983a654911b0f5677b64fadab59a4342723872a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.benvenuto.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016affc5280e0000040300473045022100e316937967deed8eaafb3509e626c9d555250421566265db0fd92154c803d4bf0220080fbb157947fd1d3a06162a1ee179d2c70e20136c5ee53e4f060bae6a45f3e500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016affc52808000004030047304502207a88ab9946e01da89e5bf8a62c50c0dd14f1c0918b32e9c214c458f3c4ff475f022100dd904642dcba08c1ab7e1982ef7d3f76cbd0bce638c96ad411ff32cf3a40b68f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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