www.giovanny.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:08:1f:e4:ca:fe:aa:60:a5:c3:e2:a1:f9:6b:1b:8f:9d:5b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.giovanny.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:08:1f:e4:ca:fe:aa:60:a5:c3:e2:a1:f9:6b:1b:8f:9d:5b
Serial Number (int): 264101510759424748487950812767099856854363
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ba:34:72:3e:4a:5a:91:59:c0:f8:d8:5b:19:7f:b4:ac:05:c6:c4:1c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ca:ff:20:67:e3:ca:4c:a5:63:b2:56:04:79:97:cf:4b:b0:20:b6:3f
Fingerprint (sha256): 57:1d:d1:1a:8e:15:40:d5:99:cc:eb:8d:7b:fd:d1:e8:a5:96:be:6b:60:b4:88:38:7d:3d:e7:07:22:f7:55:6e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.giovanny.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.giovanny.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.giovanny.org

Other certificates including the domain name giovanny.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.giovanny.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264101510759424748487950812767099856854363
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-22 23:52:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 23:52:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.giovanny.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759796485229458847307367356177188943651944040514577581634357523600649491641950392050203955036200523732640902934696058431715238381290853454503133835659529845223960803181948973837837193880214005277626683759699377021241495083905023804306783721498599445083131198497971483814260092391796036246389857588956434400959138194784947303154858294473816199873379980256153776755724845562898749433195304314941352335564782977658128579956763239889136607572876865939727663640271141230866316233655921277949983205473988432809881663252270443794344066926595545169109545147387365330778350396957309211175146527598423700328896993818575265420874864848836491793935723610594438813653831265227311900439538733218461223422760579951938026102094257058586949538979144060287405819455844604842136441658521333512444236890705560104313936889804332039662478837490598790314475198240622067932159908913733066048033545607077841996790281331386496677958123446178791803007473790715301378744345865807884948566535947741709795900266145786801382725715320756639983457707904077683963423595132862429938800463355280279493672133831942404616551262019094022863475804990584655412993266702426773952907910402907222622651831546792556400950750769184389386470930897559779765172306972250516194917999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ba34723e4a5a9159c0f8d85b197fb4ac05c6c41c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giovanny.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a80936b0000004030047304502201353487d656c0ae4b7257a35239210ee244f84a20bedfc4a72f337822179b43002210081f89811ca181d5726607aa3451e2a1f8d9c5c83d78769c4d7f3e5a036b9c2df007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169a80938a70000040300463044022026bab0f4c1764371bd175bad2dfe634bc633e23bd9aab191293eaa3d8f572ee3022018841f6fdaf213b48c9e68a056d3f9f1e37f8be537522d572f31d6b136dbb4f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ab8c143d27ebb54dc8d496a3c2cb8f9dd8648022b3b47768ef3181198b5271e7732c0156c26a8007c0b00054f2646b0461bfbac358c3d02883e62b36ff62b0f7ff262494217d9789bcf544e72fca3ee1a1b97644a8245cc06ede5af6327334705e0ed6359d7a3510f65f5bca0ded15bc45fd94b8af4db5fffe2b4be0c0c6b8fabc4f1a008e159f9295c300f6461820a8a3f4793060605fee00cfe605a4e2f7db6f872861fe1859ad0691bd72aad8aa1f713072bdeb9807918ad118030fa92fee6be269571ce454d5ec6c01bfd571198541e3da3ae5d7f58c02a944a7ad54af8d3d6d6f31a64576d9887e404f70760abe226a465c3045e0e336d787c97c9a0b5