www.ufficio.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:93:18:72:e7:2e:24:fb:7d:17:54:33:e4:b0:bb:30:ad was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ufficio.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:93:18:72:e7:2e:24:fb:7d:17:54:33:e4:b0:bb:30:ad
Serial Number (int): 319720665999776886037776990297223260221613
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b4:24:f2:fc:6d:7d:7d:98:47:13:0f:c9:b2:df:00:da:39:78:e2:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9a:d9:b8:f2:5e:7e:e4:a9:98:50:5d:f2:c3:e5:32:39:b6:67:87:a9
Fingerprint (sha256): 57:32:a8:85:09:a3:0d:0e:f0:10:35:79:5a:e6:ac:c7:64:c9:81:13:dd:86:66:dc:0b:5e:d6:2e:ce:5a:4c:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ufficio.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ufficio.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ufficio.co

Other certificates including the domain name ufficio.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ufficio.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgISA6uTGHLnLiT7fRdUM+SwuzCtMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcxNDU2NThaFw0x
OTEwMjUxNDU2NThaMBkxFzAVBgNVBAMTDnd3dy51ZmZpY2lvLmNvMIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvPYHvsmRTL9MRmqv2o43r2jaMYj6jOiH
AUoXn+5BQYppp+zE2NgTaKlbXmzYCMiT6F5eK4NRidkwidaTVHad2ahd+VjVv/CA
ghDQ9Maz0zP06VnUF9oik9fb1T8xaV6XdrmzheMnIuxF1JztEL3Mr/lg56R9j5+a
gD7wJbYWvI5u7ABK+d6XH/vuOIieBQJxLBB+fJ1iQaEmHZVF+R0/hiDH6lF6eoKG
NGS5IzCePfFRhhbUeDiP2c8d/1sxRxVRpW0kT4dYVsT9Pkn102iQ/qd3JmpaN6xL
zG0/chddysYN79JF11F3vjMXuUaj5z8OTALj1W1bsrl84U9J6XYz2Oc6tGB1G6sJ
6A/RDq4ESO3j1xHQ1RTAQ4PkhH0WurIKKqxrjNVN7K4bqI57I8lSVJ0WKBkcbIB1
SEvi33TAfefy/1D9g2FmrpGFkX0mK1HVDo5Pf79bcysRst8Pi0d+MsSGTJ9uU1y5
0CINGcW1YC4cOyWKQygeDpkUKr8TXSHZBIpiKP9rsgRQkiOjaU+dpUae9yh84qvL
h0ookLhhtDq2qC1XhXmLo94Dwp4QTkQCdiLcIGxztoFpf5uRHiBOPtCYZBuazQCF
eig8JukTk38/t15nT4AV3m1poSA5I8W7guw3LstIayj5jBAThHeYALTEOn6kocud
Pls9TuV+MAsCAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtCTy
/G19fZhHEw/Jst8A2jl44oUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo
7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQt
eDMubGV0c2VuY3J5cHQub3JnLzAZBgNVHREEEjAQgg53d3cudWZmaWNpby5jbzBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQE
gfEA7wB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbDQmQ9MA
AAQDAEYwRAIgSF2SiXwkAGePoqu3IYjoAHa7+ZVzNe+p3nq3+IsZOoQCICXSYvbc
1m9J1QxkEL6ZJzaFLQuFpuXa4rbCUVgc4QhUAHYAKTxRllTIOWW6qlD8WAfUt2+/
WHopctykwwz05UVH9HgAAAFsNCZD8QAABAMARzBFAiEAyclsw0aJtW9qwVsKQeWu
UTl3BlYiz5xFQ95/FgZFDK0CIAycWt9XfT3jWoggqV3LqsRc86XAut1m307mY6Ve
fwqHMA0GCSqGSIb3DQEBCwUAA4IBAQBeNdrE4pcbjaYn9gfwVJ7qR+Dxg3WHdz3L
aOnWilnik0lZ1q1mlL4+89dSCa417EmF53Uizg+x+dDEP/zQFk0IZdNLFAzuKrB2
X1J6JNdTfZWUwQEnrLMUScpBefjwAhasNP3/MwinOaJHkfX7xCqMrTCubYC3sQgh
sQ+DPihR1hhE+dR1nELT3/3oPRJRNuyPFh/2Yeu408/G00KfnZ7TXRV+nQ35Df7E
/EoA5feGf/uEa51LWvnJ1aFKse5OKzuC0HaVU29nP0cHBa0mSNunHuWl3yBac7m/
G+jwufrC4SeyBWBkN7F9djhCXqoiz+L9jCQoka2yuW2xAHE8KThr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvPYHvsmRTL9MRmqv2o43
r2jaMYj6jOiHAUoXn+5BQYppp+zE2NgTaKlbXmzYCMiT6F5eK4NRidkwidaTVHad
2ahd+VjVv/CAghDQ9Maz0zP06VnUF9oik9fb1T8xaV6XdrmzheMnIuxF1JztEL3M
r/lg56R9j5+agD7wJbYWvI5u7ABK+d6XH/vuOIieBQJxLBB+fJ1iQaEmHZVF+R0/
hiDH6lF6eoKGNGS5IzCePfFRhhbUeDiP2c8d/1sxRxVRpW0kT4dYVsT9Pkn102iQ
/qd3JmpaN6xLzG0/chddysYN79JF11F3vjMXuUaj5z8OTALj1W1bsrl84U9J6XYz
2Oc6tGB1G6sJ6A/RDq4ESO3j1xHQ1RTAQ4PkhH0WurIKKqxrjNVN7K4bqI57I8lS
VJ0WKBkcbIB1SEvi33TAfefy/1D9g2FmrpGFkX0mK1HVDo5Pf79bcysRst8Pi0d+
MsSGTJ9uU1y50CINGcW1YC4cOyWKQygeDpkUKr8TXSHZBIpiKP9rsgRQkiOjaU+d
pUae9yh84qvLh0ookLhhtDq2qC1XhXmLo94Dwp4QTkQCdiLcIGxztoFpf5uRHiBO
PtCYZBuazQCFeig8JukTk38/t15nT4AV3m1poSA5I8W7guw3LstIayj5jBAThHeY
ALTEOn6kocudPls9TuV+MAsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319720665999776886037776990297223260221613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 14:56:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 14:56:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ufficio.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 770893849905346912378464781323747950314457204171796621138529473760510069455229257049174566642353331016652591231192971277493561253306590548982856496157255416537347870465184178061236142937647554450087982896371256555461847462497592280137334131532122797234335063998257214258272610227794897049947488418632972159403174264748699222276487392472485527016753128800772922156830639113098176169556790156223942350024895999103328240769170367597943442155664645731533876982396213906560965336344654835753317715678800438867923645559464582690263618928571482040987756679571678301696545199849411562784825610759640711240876551145311343352019703310939430859610484959465383136735217345537398768880880725995424871590666609585018584010850878858990882333767177625244875445235495963279873960649098009124973310653663477005349157026810516789675128985252512021827781688833778138781260116883235716365197316888903968889359946485332731683181939589270602023537513684632466898369017479552260621244712827696246394398474499520035110464529979563101506014681076451561794834271423151011502143083186518067661492237172104735017464906035718740237598288017224258436136516082364483249613100950834944353132559594894701855781775453273932795082727418244509361614173931304046175334411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b424f2fc6d7d7d9847130fc9b2df00da3978e285
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ufficio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c342643d300000403004630440220485d92897c2400678fa2abb72188e80076bbf9957335efa9de7ab7f88b193a84022025d262f6dcd66f49d50c6410be992736852d0b85a6e5dae2b6c251581ce10854007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c342643f10000040300473045022100c9c96cc34689b56f6ac15b0a41e5ae513977065622cf9c4543de7f1606450cad02200c9c5adf577d3de35a8820a95dcbaac45cf3a5c0badd66df4ee663a55e7f0a87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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