desenzano.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ee:86:6c:32:c0:c9:8d:01:46:53:4c:34:bb:95:5a:c9:7b was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=desenzano.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ee:86:6c:32:c0:c9:8d:01:46:53:4c:34:bb:95:5a:c9:7bSerial Number (int): 342502739471354659069364417351303221135739
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 68:4b:b8:08:fd:14:19:38:b6:9c:60:db:07:ab:62:6f:c3:ea:88:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 9e:a8:c0:a2:0d:98:77:5e:d6:7b:6b:51:33:0a:3c:56:97:bf:b0:b3
Fingerprint (sha256): 67:24:38:99:d6:cf:82:74:68:fe:e3:55:da:97:b7:05:82:5d:c1:13:35:3b:47:c7:22:7d:c7:44:aa:24:51:3a
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate desenzano.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for desenzano.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
desenzano.co
Other certificates including the domain name desenzano.co
(limited to 100 certificates)
namparealty.com
saale.org
dubaidoctor.co
apnet.co
www.foray.studio
thegardenshuttercompany.com
www.desenzano.co
lymediseasesymptoms.us
apnet.co
multimediacenter.co
szcil.com
www.addison.biz
desenzano.co
desenzano.co
woodenmobiles.com
www.maurizio.co
digitaltrends.co
motocicli.co
pokerchat.co
kulabrandscomplaints.com
librewallet.co
thegardenshuttercompany.com
desenzano.co
www.desenzano.co
saale.org
dubaidoctor.co
apnet.co
www.foray.studio
thegardenshuttercompany.com
www.desenzano.co
lymediseasesymptoms.us
apnet.co
multimediacenter.co
szcil.com
www.addison.biz
desenzano.co
desenzano.co
woodenmobiles.com
www.maurizio.co
digitaltrends.co
motocicli.co
pokerchat.co
kulabrandscomplaints.com
librewallet.co
thegardenshuttercompany.com
desenzano.co
www.desenzano.co
Certificate
The complete raw certificate details for desenzano.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgISA+6GbDLAyY0BRlNMNLuVWsl7MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUwMjExMDNaFw0x OTA4MjMwMjExMDNaMBcxFTATBgNVBAMTDGRlc2VuemFuby5jbzCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBAJvLODsyz+8l1E/TSvQv6Wo6MTFi4dO7ZUzV 3pDgKBM1U2U3mcjwwsrXDQ+3e16qsObjY7//utEZK97VhqxvjkHAehQxbW3Lcbhj HbcS1RSEEELq062rbrOMp6ysbc9A0MfqC2ijPiLvfTQGuJ6DHqj+dqzZuh5FM28c jh9tiIRY1yH45AxNZtXuB6CV2joYvpNTt3I+qEmII6OOQHDvI6s/OZfAGbAtnpF6 5qng01uVDEYPdVQSqjz7W6x7SUHh0lB1Xe/F4fc5X0wQdXQBq+qhXeudDiFvT9Jm q+1JXqF/F7Wz1m1dbJxBuVL0hsQBMfr8y/6n7jpoMMIH0DkmYP4SORRvQkTmM4ze 5HO4VcjGWgpMBZg/iUs6wxi+KOvPm96l2+jDWdtVRB7ts7zgTHIpgqUEbqdc66Ob mXGiQhnPdVH9c7wvUIH6Fjm/f95JxjfMiKY467LEl4HGsYGrjLdB9wp/3MEqN9uE GweSaldD4JIbwDW6crYgv71NpwNd0M4+IaD0eJ4JJl9GWgn131WXQiY9NYW3QUSc OlH5Fc33lhmn8olT/NwtLeUDAPs9dEmUKV+VhCP5acqc2Cz5az91DNONOQLByyZf OOjPWaWIbJCjrxjIpYxQi+AqWHtVXEGIHJsFx93mgJvsHNBDLJOyKcyKTCNASbPL MZYgcPJzAgMBAAGjggJgMIICXDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGhLuAj9 FBk4tpxg2werYm/D6oibMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMZGVzZW56YW5vLmNvMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDv AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFq7Pho/AAABAMA RzBFAiEArdOYXBV/enNu3WEmzdWk7N7ehIxlRxypcVQ5P2aUohwCIHfmpUsIK47f klWBRJq73tqxgsdtNs9vzis+0sekSHuRAHUAKTxRllTIOWW6qlD8WAfUt2+/WHop ctykwwz05UVH9HgAAAFq7Phn4AAABAMARjBEAiBkKh7fAeoD5GDyQ/GItY4IK8Bd FgT2rPr6JEfJMfUSygIgCbuVPqMjy2cGNeZG9BdzWCw4Y4NYkyKSnFnJpjDJShIw DQYJKoZIhvcNAQELBQADggEBABb00lmPKFQ9BswFBIP+Q8FaWDpfWlV1S3QSfp3c nwSKnRW0xdDq22Lp9uw2JUt2DcXNBs4sV9untjUKCLDul6vsX7WttJgi31LcLB93 STXW7QCrD4WCc/GfD/481G6Y1MyMtkxZCSaz50pVzohpe4rRz13I0YC/obdxOXnI xh5yChrZWbty7cmgkgBEDDW47PDUNzQ0qWpWiL449e7Bd2uiN8vquD/+fKTga87K Mf6hCoxNyVq6oPEAE6pDgo8tQeSGW+aIQBT6CFoZ9TCcirMkB3juH9Ek1wcmBa0J w58Iu58piGPbqgzy70x2Lasg5JkShoRtQJTHwEr6LjO45Ks= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAm8s4OzLP7yXUT9NK9C/p ajoxMWLh07tlTNXekOAoEzVTZTeZyPDCytcND7d7Xqqw5uNjv/+60Rkr3tWGrG+O QcB6FDFtbctxuGMdtxLVFIQQQurTratus4ynrKxtz0DQx+oLaKM+Iu99NAa4noMe qP52rNm6HkUzbxyOH22IhFjXIfjkDE1m1e4HoJXaOhi+k1O3cj6oSYgjo45AcO8j qz85l8AZsC2ekXrmqeDTW5UMRg91VBKqPPtbrHtJQeHSUHVd78Xh9zlfTBB1dAGr 6qFd650OIW9P0mar7UleoX8XtbPWbV1snEG5UvSGxAEx+vzL/qfuOmgwwgfQOSZg /hI5FG9CROYzjN7kc7hVyMZaCkwFmD+JSzrDGL4o68+b3qXb6MNZ21VEHu2zvOBM cimCpQRup1zro5uZcaJCGc91Uf1zvC9QgfoWOb9/3knGN8yIpjjrssSXgcaxgauM t0H3Cn/cwSo324QbB5JqV0PgkhvANbpytiC/vU2nA13Qzj4hoPR4ngkmX0ZaCfXf VZdCJj01hbdBRJw6UfkVzfeWGafyiVP83C0t5QMA+z10SZQpX5WEI/lpypzYLPlr P3UM0405AsHLJl846M9ZpYhskKOvGMiljFCL4CpYe1VcQYgcmwXH3eaAm+wc0EMs k7IpzIpMI0BJs8sxliBw8nMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 342502739471354659069364417351303221135739 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 02:11:03 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 02:11:03 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'desenzano.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 635583361219209644055637418798744226806691626869620675912240842354671111132357077900855956967717212970752792795771409443088932786668101612252392325160696218852592922130133210127680975341677804666583847544226681489713067518226454430612273435235943654906276901145842416148656634193765698530136798598069262822592292861012520339684472529960124881586839467909612987940807041282037487177299680486428702836105077128146534287501059215038612036811080776374739538054369988072676706853863793503275362342171705178607135814743601282513102062054242089664745374612339535457181168899651132717929531424692477552201263361825872859137433207869783672948745957071989980560078588864557063155244551039699790482305393292034897065009926329351258938920180274440692947293731039792543316373929288716824821051557988600907519092460559450818055623792404116912524270414036200508071822919634640324176716438208768529462317132273362314941189088141076512545066075571291308750121835366807741983555992210868132240240431995877524458881596632283571359425864257322026836731637763211074291844736258677841908195466660806361523249791401606018041177165927839967912197170598986746321462344485100620025105035760115983621840682200833353081799276104570207465520048080526818568893043 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 684bb808fd141938b69c60db07ab626fc3ea889b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desenzano.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aecf868fc0000040300473045022100add3985c157f7a736edd6126cdd5a4ecdede848c65471ca97154393f6694a21c022077e6a54b082b8edf925581449abbdedab182c76d36cf6fce2b3ed2c7a4487b91007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aecf867e000000403004630440220642a1edf01ea03e460f243f188b58e082bc05d1604f6acfafa2447c931f512ca022009bb953ea323cb670635e646f41773582c386383589322929c59c9a630c94a12 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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