reso.io

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:25:95:d1:f1:e4:4e:2d:e8:7d:6c:91:70:1f:35:95:2a was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reso.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:25:95:d1:f1:e4:4e:2d:e8:7d:6c:91:70:1f:35:95:2a
Serial Number (int): 325019619755760447608522036696984178758954
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:b8:68:6a:bd:9d:8a:9b:bc:dc:f2:ba:bc:52:8c:f7:93:b2:e8:05
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 61:7d:b7:8d:6a:35:b4:3b:4c:64:27:c7:99:d8:e6:92:8b:87:dd:12
Fingerprint (sha256): 56:f7:67:ae:95:f1:21:40:9f:57:5a:09:0c:9f:84:36:0b:43:c1:81:20:b1:76:17:ba:d8:41:9e:a7:84:b4:72

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate reso.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reso.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reso.io
www.reso.io

Other certificates including the domain name reso.io

(limited to 100 certificates)
e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
stage.reso.io
*.e.ssl.fastly.net
bp.reso.io
*.e.ssl.fastly.net
*.e.ssl.fastly.net
reso.io
reso.io
*.e.ssl.fastly.net
*.e.ssl.fastly.net
www.reso.io
*.e.ssl.fastly.net
stage.reso.io
www.reso.io
martin.reso.io
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
www.reso.io
*.e.ssl.fastly.net
e.ssl.fastly.net
*.e.ssl.fastly.net
e.ssl.fastly.net
e.ssl.fastly.net
www.reso.io
*.reso.io
www.reso.io
*.e.ssl.fastly.net
reso.io
reso.io
*.e.ssl.fastly.net
e.ssl.fastly.net
www.reso.io
*.e.ssl.fastly.net
*.e.ssl.fastly.net
bp.reso.io
www.reso.io
*.e.ssl.fastly.net
bp.reso.io
reso.io
*.e.ssl.fastly.net
e.ssl.fastly.net
e.ssl.fastly.net
e.ssl.fastly.net
reso.io
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
*.e.ssl.fastly.net
www.reso.io
martin.reso.io
stage.reso.io
stage.reso.io
www.reso.io

Certificate

The complete raw certificate details for reso.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325019619755760447608522036696984178758954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-04 16:19:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 16:19:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reso.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 701075181912613272709735873264687413939825322517525606757648207208403818247112072298300083705967944913451403382801613814330332085039775692845025783977466420348010299621546468886886316845708977240459785655507833585606779385703250569930934745558048932550443182827352366456520649542768117848947966829878790658633948949834507364795404323604471016743129425373412660967926603230732774267337046037797058500302796914863252659320743879914496389341412313760548980792860567801420506000209845108639895666423397434308978885199245439355353192375177534167124602735383373295712049005133211787993056786884010358821153639609747457148475552738214298727802152265626323930374213958217425566012967232494244964718704971600243191880932067301308964036231425298405717887989466669836404079585604757266521376858252307932439783747885675558145950278419320861029650399839300679266619667504701121615062674597601076091388468574002033406346612128235902645623504544590299207317803360012559463840321414994916182810176722586616303015830370849822869252255716872109941196491754934837946721996276209847931428191765180913018320112041556884047912984045661035110380895242676592916066704434252778332178438254747227660555158846137771291422968034021946372555821217921638589393477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03b8686abd9d8a9bbcdcf2babc528cf793b2e805
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reso.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reso.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001861d706d690000040300483046022100f3afe093897659c5cf9e15b2e3fa3daebc205c8cb7ec817325ab4c4788b9d2d802210093200bcf742972d8134c20454b02b51f5edceb312b3c1075174d94c60e89645f007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001861d706d970000040300473045022100e676e4cb268f5cb2501518730dd8bca05ebe11d99b0c2be34bbdbcadfff767a90220549d299bdb5b13e10e1db7b1e06c0c2ff381a259e795ab854b96c68de6f15256
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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