desenzano.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ee:86:6c:32:c0:c9:8d:01:46:53:4c:34:bb:95:5a:c9:7b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=desenzano.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:86:6c:32:c0:c9:8d:01:46:53:4c:34:bb:95:5a:c9:7b
Serial Number (int): 342502739471354659069364417351303221135739
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 68:4b:b8:08:fd:14:19:38:b6:9c:60:db:07:ab:62:6f:c3:ea:88:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9e:a8:c0:a2:0d:98:77:5e:d6:7b:6b:51:33:0a:3c:56:97:bf:b0:b3
Fingerprint (sha256): 67:24:38:99:d6:cf:82:74:68:fe:e3:55:da:97:b7:05:82:5d:c1:13:35:3b:47:c7:22:7d:c7:44:aa:24:51:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate desenzano.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for desenzano.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

desenzano.co

Other certificates including the domain name desenzano.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for desenzano.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342502739471354659069364417351303221135739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 02:11:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 02:11:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desenzano.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635583361219209644055637418798744226806691626869620675912240842354671111132357077900855956967717212970752792795771409443088932786668101612252392325160696218852592922130133210127680975341677804666583847544226681489713067518226454430612273435235943654906276901145842416148656634193765698530136798598069262822592292861012520339684472529960124881586839467909612987940807041282037487177299680486428702836105077128146534287501059215038612036811080776374739538054369988072676706853863793503275362342171705178607135814743601282513102062054242089664745374612339535457181168899651132717929531424692477552201263361825872859137433207869783672948745957071989980560078588864557063155244551039699790482305393292034897065009926329351258938920180274440692947293731039792543316373929288716824821051557988600907519092460559450818055623792404116912524270414036200508071822919634640324176716438208768529462317132273362314941189088141076512545066075571291308750121835366807741983555992210868132240240431995877524458881596632283571359425864257322026836731637763211074291844736258677841908195466660806361523249791401606018041177165927839967912197170598986746321462344485100620025105035760115983621840682200833353081799276104570207465520048080526818568893043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							684bb808fd141938b69c60db07ab626fc3ea889b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desenzano.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aecf868fc0000040300473045022100add3985c157f7a736edd6126cdd5a4ecdede848c65471ca97154393f6694a21c022077e6a54b082b8edf925581449abbdedab182c76d36cf6fce2b3ed2c7a4487b91007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aecf867e000000403004630440220642a1edf01ea03e460f243f188b58e082bc05d1604f6acfafa2447c931f512ca022009bb953ea323cb670635e646f41773582c386383589322929c59c9a630c94a12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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