www.latiano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:06:b5:3d:6c:64:8d:5f:58:86:dd:19:10:17:ab:4d:d6 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.latiano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:06:b5:3d:6c:64:8d:5f:58:86:dd:19:10:17:ab:4d:d6
Serial Number (int): 330423094699752099106047922471145969503702
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b3:30:1b:42:d1:01:be:39:2d:70:bc:1f:1d:21:74:ed:12:b9:2b:f6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:a8:b8:e0:ce:99:1f:cc:26:d0:1e:6b:96:bf:94:75:b5:8c:16:38
Fingerprint (sha256): 49:f0:31:cb:3a:cf:47:63:a5:68:30:ad:9a:a4:2f:f7:8b:21:d0:13:e6:12:fa:e5:ea:a2:81:09:34:f8:2b:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.latiano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.latiano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.latiano.org

Other certificates including the domain name latiano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.latiano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgISA8sGtT1sZI1fWIbdGRAXq03WMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNTE5NTZaFw0x
OTA4MjYxNTE5NTZaMBoxGDAWBgNVBAMTD3d3dy5sYXRpYW5vLm9yZzCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBALyqQY3jZ7WFQVcTEXYuU9mRR6UDbhkY
bOYSd00+d9qtxCEDchEmZbtfFWIY3o69mlmn6hI4jsrUXYaEfb6fhsQoQITIxAGt
aKP/yfYlLJlK650B4QCBjC6RDKpBy0By2t7WCUs2e7PQn6qRGibLXJRmMseOLkic
n1IWOtK26eEqsyUC0nayoR+EX17wePAValPjU0SaPZo/90woJPjNdzlOME1PD4PX
fZ6d1A5lkK/8crjEelRUF5ijMbrqiwDH+OAM97EA8N0959rpT0G9+W+gwfDUfnNy
VmR28Q2nUdO1BWBEQ3TYiInPtiP4OFSSgsGXMANJSJQVC/4D+B5KnoXXAatou6CU
AqX7TwDLI6u/oC2iIYXxuVLOegj4TQJvsmewkEhossB6woAxCOR84Ejf7kwFappi
IOiMue9cy/FQx4xxNKTx06hlhXjQgSaGOd2g53qQxv8gc6KO2JB14H7DyDnHhSZ8
W0nkZQw+NHzjjFphgrca4WZ3c+xbH4tcEL1xxXT1Zmd0YNJJSNEO9CAIgd8+EVKB
a16gLO677ABC+2gj9eJOxOzrh4UbV2cslkqRJjgleM7WZr9cVMm8RHcdNkgDsJP7
sRzkYQcpAFtjw0lhEUlCF/b0sz+ChuCXXpVs7cqZHiix7N3NMgLmQg3trFJFyZAf
CwFuy5lOu77LAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFLMw
G0LRAb45LXC8Hx0hdO0SuSv2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3LmxhdGlhbm8ub3Jn
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB
9gSB8wDxAHYA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFq/z27
TwAABAMARzBFAiEA7PLmcr/evxMOlrdrRsgDBBB0l4dUQdFn1UW0UT/1y/QCIFiC
gFkGn9hfr/s3qBXFr2FCaJ7UpKQN4sA3VYcNWYoWAHcAKTxRllTIOWW6qlD8WAfU
t2+/WHopctykwwz05UVH9HgAAAFq/z27cQAABAMASDBGAiEAvhaDLudZpQob0+BC
ckZsIwgPmwSMX6/+kdwV7V3QHMECIQD2HUeynU1TlkoW6iiKCcUIhZc0JrH3ifsY
ccm9oEVGwDANBgkqhkiG9w0BAQsFAAOCAQEAe4KZxcqZvEPyYaHiuspKvGBRcYmc
z8lNXWBNkA7ap8rGmxLayFaq2M2WptvYekm5Jes3c/gqAFk/CXYHGqh7VQvi3DSE
BorZM0inQJ+B64b62OEQZk7NpO3biRd81FdK4T3zs+5/P/nTQ+yMyaqsqcBL8E6D
WCbSjn+q0LuaeAjIv/FZYiZBKe4NLGrlSponyvP8nMwFvx0EWo4oStbIxywlkOEP
7j5llQVL9eSayB9X1gt4oRhUnN3JqgBXo0qqR+ig9VqzbkPEeMLMbdvieUNN99SL
guejsn5OqMLSQ8zr/y/CTvzV3wXnCAHoVPW5f3+RxwIrz0yiV7rzXZaAvQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330423094699752099106047922471145969503702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 15:19:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 15:19:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.latiano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769686304206915071519334958550906649470313765134871457212662472447412358634497943028408752543645074675513890447764671472975309027212637746600479936796335388712527439317022824070420752928601866995907135386841894403128411127236469778953745535984375817132985238860018733093379460258745960953060449564365351082854801091203688766433646894394849715999738468613113802254432842199685172375957746071433793768432245031810576463837026619733106723961369082232140738087545194356055825751814933739821433323660509576014288531006257434785379107813801651156919081056974434935744888699934650735164536170814490849362191682427894357854559550895363619287431043624366236775103624569058344846956227409880160169196951677507487849443993691057083978523425351804372903086200494128097738956484579636840463653757072847436043253041548326688941197446276164803000990397285840326940897162020138313233287673080504575699335185892527628680596383887906540188962900215379298267862168079851507429834303831055189338948835993578395002787630094802287516220492379495809656786377170230235856377804229913295093542188332169881767453369498804868509683608143070964050934132698619373317939171787362827108197860762549299660750787907640109808524932188564707608796343883806566363414219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b3301b42d101be392d70bc1f1d2174ed12b92bf6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latiano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aff3dbb4f0000040300473045022100ecf2e672bfdebf130e96b76b46c80304107497875441d167d545b4513ff5cbf4022058828059069fd85faffb37a815c5af6142689ed4a4a40de2c03755870d598a16007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aff3dbb710000040300483046022100be16832ee759a50a1bd3e04272466c23080f9b048c5faffe91dc15ed5dd01cc1022100f61d47b29d4d53964a16ea288a09c50885973426b1f789fb1871c9bda04546c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b8299c5ca99bc43f261a1e2baca4abc605171899ccfc94d5d604d900edaa7cac69b12dac856aad8cd96a6dbd87a49b925eb3773f82a00593f0976071aa87b550be2dc3484068ad93348a7409f81eb86fad8e110664ecda4eddb89177cd4574ae13df3b3ee7f3ff9d343ec8cc9aaaca9c04bf04e835826d28e7faad0bb9a7808c8bff15962264129ee0d2c6ae54a9a27caf3fc9ccc05bf1d045a8e284ad6c8c72c2590e10fee3e6595054bf5e49ac81f57d60b78a118549cddc9aa0057a34aaa47e8a0f55ab36e43c478c2cc6ddbe279434df7d48b82e7a3b27e4ea8c2d243ccebff2fc24efcd5df05e70801e854f5b97f7f91c7022bcf4ca257baf35d9680bd