www.gaeta.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:fb:0a:73:42:c5:14:3b:88:be:27:ca:7e:50:cc:7d:b8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gaeta.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:fb:0a:73:42:c5:14:3b:88:be:27:ca:7e:50:cc:7d:b8
Serial Number (int): 285830596334345126230623260644945997626808
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:1d:b4:53:04:56:d6:c6:32:56:fd:65:3f:07:fa:de:f4:8d:e1:e4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9d:5f:7f:7c:00:1e:60:83:e6:8c:d2:42:f6:64:a0:83:7b:72:ce:e4
Fingerprint (sha256): 58:02:dc:9f:43:24:5d:52:b2:d7:e1:85:e6:30:72:ff:a8:42:c5:f7:00:a7:f1:68:1e:f3:90:2d:21:b0:52:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.gaeta.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gaeta.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.gaeta.co

Other certificates including the domain name gaeta.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.gaeta.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285830596334345126230623260644945997626808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 15:04:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 15:04:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gaeta.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 660017721259216740597521130459453226212055554064572642432615365470823890878925542522263787191841810925775389896902689453325833652008753031048323075112943346483124389287287109456052121164700883247707549891578877498460769865032252264401483449714663688677899742667520767674572651702843289625140696690942606006452401111971887421371965425397374451733824333876605465922841567010789694720092708334843987919456132990898434858658504069549455856956318565749840975466162077183567070489494341786035112278451606159990452690041730363644486306944182922754226126253845328999798158562952363933518521262461146910235381408827381989815305352851786824165265299990698915748312160637139161869804272017886080684589503781360580814813881565312701055400764558411098284285031314814755631494772339850750072891746625315181840413894315959024698249314985631836230340295719480089667725566117979199764595125030039549747619696310860619761765758025134701788663294446680253773178393463714079261692660409637475535274193108810954609423022141250891910061359382278402981066653281311758247197302051044191734390311819535826451702216090201851751027977742522098130906100477154608057868698950156240887796847286006843144726197292439351597021845149827349469697876152877710334445589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							521db4530456d6c63256fd653f07fadef48de1e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaeta.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c342d7b86000004030046304402207f8849acb73273caa9d2dffbb1cd9f558c0349b3ff8e0a3d70449027eaf3d97b0220633ab28695412acf89acd332c5b4e287b8eab5012e00df7daeddd61c6128d4d800750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c342d7b6c000004030046304402206aff4e4aaa55cc98e67ef0a2d61c1abbd720c92ae024c5ab28cacccb2d3f0ec60220042e5970867662f423239599ca21110a4c568c2f90abdfd359f57172c4196857
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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