giusto.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:8e:17:b4:77:43:89:9b:44:a7:88:b0:5e:fa:49:f1:24 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giusto.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:8e:17:b4:77:43:89:9b:44:a7:88:b0:5e:fa:49:f1:24
Serial Number (int): 286706626405942172439375921603993068499236
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:0e:3d:5a:83:14:0e:1f:46:33:6b:4d:06:7d:a6:e0:76:f7:f1:89
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3d:59:22:da:19:55:40:17:fd:b4:35:8f:a2:de:31:08:8d:11:96:52
Fingerprint (sha256): 64:7d:69:85:27:9e:94:16:00:1c:9a:2f:9b:1f:c0:f0:67:12:35:ac:fe:94:ac:3d:01:4f:a3:5b:6f:26:3a:21

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate giusto.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giusto.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giusto.co

Other certificates including the domain name giusto.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for giusto.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286706626405942172439375921603993068499236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 01:34:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 01:34:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giusto.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830790239745989198558420209228072515595218488144692702819204815057828959690933208265765974109511299899538405654487611517275099967531215875374129633709523927987547415276652611132962648707326907456821204032921561986058817652997843636303167654184644794392071663279950903898178490148733535850043629000100141604662943617117508598468439785179313049479120887259200061712319812285550994237381402216906401291910876105046391268794769170453657183842727356598359598217183182344093675525067818660627168949421892820841239136161496616065437345718262993344105156604207473613351461354580922631112486265745939421073327981216555157277864850388753253900589628523458193068644383262542849477099830552152189184493205468979000080648559787966120153726918670154116011338203134027085794346143090841200162427335204263299202762286278706318382836021756737352303906581486303562611845620507326947536529445849247961081101049161207211981467580499915868885162691990596752432548227335474447275347191487030225354211995315002619848986695609936229651397861820690240797280283928209378600332584977809223632839877759843040936787426341637155107222421677659874346007798233869313224627970726498516106165574567419229836483424163476215647496358594282798138016440267675772921815773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							950e3d5a83140e1f46336b4d067da6e076f7f189
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giusto.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016afc49f8fa00000403004730450220405aef124782a003bfb7ea22ad9822d9bc8b8055d14d2675cb7cc5510976936f02210085ce52eee5a4ac1a570e798bdb01906d7a20488e44bd0363db8e0b01c2583247007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016afc49f7230000040300483046022100aaa7f4dc642a45364de467f536973b9c2327b77ad148358276a2cfe14a005519022100f5c7c0732e358952ffc9e5f853e6ca300dd1058445e3f4e5e0077d1aa7a92e16
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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