ottaviano.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:5e:56:31:9a:84:cc:2b:1c:9d:7b:72:e6:5a:34:64:33 was issued on by Let's Encrypt.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ottaviano.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:5e:56:31:9a:84:cc:2b:1c:9d:7b:72:e6:5a:34:64:33
Serial Number (int): 347213409234571155271752904150477016687667
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 02:c3:56:37:8d:8b:a7:4a:f3:4b:64:e5:f4:33:51:e0:1a:46:bc:5d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:f2:ae:5d:b1:bd:1b:7e:b8:6e:99:d6:0a:e0:3e:c6:bb:0e:f4:f0
Fingerprint (sha256): 68:56:07:b0:26:f3:cf:30:b6:79:eb:f2:bf:4f:53:26:99:1a:68:94:b7:89:5d:1c:31:b9:f4:67:a4:cf:3a:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ottaviano.co

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ottaviano.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

beachchair.co
cryptoblockchains.co
foligno.co
freevr.co
fursocial.co
gaetano.co
meshrouter.co
ottaviano.co
prptreatments.net
silvestro.co
topmarkets.co
www.beachchair.co
www.cryptoblockchains.co
www.foligno.co
www.freevr.co
www.fursocial.co
www.gaetano.co
www.meshrouter.co
www.ottaviano.co
www.prptreatments.net
www.silvestro.co
www.topmarkets.co

Other certificates including the domain name ottaviano.co

(limited to 100 certificates)
maurilio.co
www.anunarmedsociety.com
connecticutprobate.co
www.licia.co
fsanz.com
saferbet.co
roberternst.com
niv.com
avenged.co
rhodeislandprobate.co
moneyexpress.co
www.xrforu.com
89274.com
ottaviano.co
womenstaxis.in
www.ottaviano.co
www.smallbusinessmentor.com
www.ottaviano.co
ottaviano.co
www.123divorce.it
www.firecode.info
www.soulja.net
ottaviano.co
www.easypaynow.co
qualimedica.com

Certificate

The complete raw certificate details for ottaviano.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH9Qy/9suuARd64pMPsK
/TfYU0a53b4QMJYEDTy202+EEjf2KK++ZMT8x2gIOLYTPvUtkv6NRDSWyEY2Ibm8
rjd6CuGwGhya8WAyS2eVSAH4ov3aGr+IaoUdZ1z/RoJ84mBcVzZzFm1aQ3ziDJqA
4LNC5WR6btFG041SKBbpnygLsbrEagTPkJSVssUXc7Bvbjh7/jc96jWA3e8fRqze
KaMYIbT85QVfB6k0ckQN6YsKoJJos5EqOrrCLNcSLg3izDd3iMddtCfa+TI3qpMr
AZE12mCeWgAmY8pQB9oNQARGQLRDUYd5tP2x3nL6LWXTcyUWkOF1YLJD2PhQXKAO
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347213409234571155271752904150477016687667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 22:52:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 22:52:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ottaviano.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22785676562446688108931354715316453600421648060612228515323962031240738586060573698283217945150701184298312992672812587611013024932448915566581296287291174174355417471000289718943661213936566427500165785634489271174644053748665880066767567196777818996234871157435544656114386302861209306650921487623401085464815354996283886530072089972214094395684476611570693869338679676825113130821594860395509011594086897037535871046015695276607400360801865906164574608346237260755254017323400336069935055881718411613318509555628177149607017809426933231116352039255815440051502934823786245750934346877908088011023860612577208831657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02c356378d8ba74af34b64e5f43351e01a46bc5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (374 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachchair.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryptoblockchains.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foligno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freevr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fursocial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gaetano.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meshrouter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottaviano.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prptreatments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silvestro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'topmarkets.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beachchair.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cryptoblockchains.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foligno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freevr.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fursocial.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gaetano.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meshrouter.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottaviano.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prptreatments.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silvestro.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.topmarkets.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ed354a3c8000004030046304402202605eb2fce00160bcb87cee92d34102698af14523dff8db6f6675bdf9032c4fc022043682a6299d1f18d7875c261c9248063431308a267c16e888268f8088b317ff3007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ed354a3bb0000040300473045022100ab40c1a1cbbe0f60d95665b5ac9a975fc891e99083b19354f9131978ccbf9def022039870cdcb683d09be9bf97235061ce89474cc3056dc475f6ef01b84b64279e6f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ffb8f39c3b649e85cdb0923ed65c098ecf8ddd0de3830ce26f337f095dcd8f49ac2fb5908ec031f38ad0da408ab4475459205efe38cc25102814702919cea482c999f9450acde581cacb79f0979397cc280d209d9614b2e88cf5a6bc8add1a1a410dbcead3c438cf7ca0cf0aae1f56a6502ef1a0b82d138545cd3fa5d491b45f731d62fe5d605ad5640cb117ac61340434ff7526490fb2023ecc2506b5d2661329aa73d00f55470688d800bfc8e99004c8515ab52177a736c7880cbc07d8f949502a8f7c9c5b07596487560c80e833cbcb09b6694f4d0fcab859bf007c29281d726b4309cd63a49604a634a063f0a55f9e29382238afe0faf5ceef3e226435c