www.giovanny.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ef:18:c9:01:9c:3b:ee:ec:35:e8:0d:61:16:73:26:a0:11 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.giovanny.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ef:18:c9:01:9c:3b:ee:ec:35:e8:0d:61:16:73:26:a0:11
Serial Number (int): 342697288645612987600195578933221362409489
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:9f:6e:58:1f:e2:08:6b:d5:a2:66:85:fd:31:74:b2:1f:43:c9:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a1:f6:e2:9f:e3:21:44:a4:f2:d4:5b:b2:56:27:6e:bb:df:25:cf:72
Fingerprint (sha256): 68:c9:ba:ba:6e:49:9e:76:25:20:8f:71:68:2e:29:43:d3:8e:4d:17:20:f2:17:ba:a5:46:65:6c:b9:ee:80:a6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.giovanny.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.giovanny.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.giovanny.org

Other certificates including the domain name giovanny.org

(limited to 100 certificates)
giovanny.org
www.giovanny.org
giovanny.org
www.giovanny.org
www.giovanny.org
www.giovanny.org
www.giovanny.org
giovanny.org
www.giovanny.org
giovanny.org
giovanny.org
fd2.com
giovanny.org
giovanny.org
giovanny.org

Certificate

The complete raw certificate details for www.giovanny.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgISA+8YyQGcO+7sNegNYRZzJqARMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMTMxMzU5NDlaFw0y
MDA0MTIxMzU5NDlaMBsxGTAXBgNVBAMTEHd3dy5naW92YW5ueS5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCw1woqg6umpWVlaaWdb8E+AjfOtSXd
YXhaZGj7nRE5a7LBqezRV9Wifrx/AkhV0YHNgbuuoEBZoSZaJEqDd7f8oygjwDq5
vqpIVPLYyYP+gyVh/c7aihS+bc4kzfhdxBOWMv0LOjtEBz9quNiCFMOS/5VDJ05y
Kr8BoJkDEuRCKSRP/XuTc+BativhGpr/2JS5bhegRzl7ZmpvC6kawKSrL+nDaRyx
KEquQ+z5+D+i7ZMdfe8k+8Eg80PxWRXHDZGt7YRJ4roemoZdVeeTN0NXtNkm0gWX
SCDaZUgsRq0hFKvwrLqIhybr5oMhm/0uDIG/XIEUKN5zE9oSBXPeNuEI9rdkbYSo
5hHvRlce/uwxDB1b7TbtbZPBCxwRk1PbtysxOKD3vYmigw2JIJvK3c8THVSZwWLE
srViMehCkJaHfpOYA/cUeoGsq33Lrejbklyy3obpRPTrmqQsdfuNR3+JUZwzQwof
oOR6GPotH2IeKp/7xZ60r2Ho7q2xzn7eTK3Ct4ZM5ah6ErmmD+B9r/52KNGK3LOD
+te15HbO/++ojs/rzX7LNfgdf16A7UoV0ldN54rhIMlNIjOVud2wPSDY7bfVrrvE
KVgouKmAY7ZFWgtWoLcNwdlE/TL5He5DfnubSwdy0nvfef25T3W/ozvkrFW/1NOb
ZSwo8we3MJt+VwIDAQABo4ICZTCCAmEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSg
n25YH+IIa9WiZoX9MXSyH0PJpDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHd3dy5naW92YW5ueS5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW+f
awfZAAAEAwBHMEUCIDN2qaJM2HelwZvPNxYP2cwWTQbKLPweNiuJoOONFP0JAiEA
iVepICrHU2z/zd8S9OKzFzCrelvTvaY0aG5sMX2iCTEAdgAHt1wb5X1o//Gwxh0j
Fce65ld8V5S3au68YToaadOiHAAAAW+fawf+AAAEAwBHMEUCIQDFuR4B+fDTwIkT
F7EiS585poglZWAjp6pNf1bzhGv1hAIgJ+Fv0vxuQ5ylbXhtTLvacppLp6KQJtrg
x97Zv6dm5W0wDQYJKoZIhvcNAQELBQADggEBAAY9+l0FSjZq2XO/4AbojtJmYU9a
x4Ubi/rxsaQOEzDcOeKwMNmJxKqn2FxqazSXPImIufdimg1+OLzqdrBM6kCCL5uJ
w9uItpRerUwSNCJWkQrg8AjcNa0K/eXCFHDH/9ztdIBBl+DFkyvfDpj5W8Oeab8D
CvZF3VWRczJppnFcSGa+RB+2KfFN5EyThvjuKex+as/PD629q3+4ra7SwGm6o+t+
HyPA1/0cQsa+ebT64ct9WJ9587Bkl6EsZai6u8blx0EhFhqoN8sql9wN8mULMAq1
za4Pw6AQ1d4T7+PRbLxncQWV7tUCruMoo2QSZHb6OsIVeA8QyNQRTQQYmNI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342697288645612987600195578933221362409489
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-13 13:59:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 13:59:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.giovanny.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 721444252386606719645774602945308195423661283467792691276770510909186660150339342989442758088792085808086855712475262139960478409098437477562247090966514548852794245154116012439152053079254086582593332935896103854871711087521980155257843055899281958876982069237760041192050038695556399400812771559661140563916808873731073261660316464682805890708123016388597185258084347928756592926307978764699560093097099473925941080163080651217961888425199935929746934406527580002035506671029452571862453150755279998204315129775869267341544481351239844125999710836414755102059167680027025227751608774559844577978780296139778466552943062792736999119620172458468357533144684951775390216643051090321350264315046895544156031527960920087823298296047103529231669290608288437595229676001600439751203194175290318666591347125604380976022161074620177114802600661829379635614275364498106182780815328316348640642226990580386901025849161770151733371959263148309466914254896116868010264267499121491094783420108291888638985211434525199929721094103571848729699890871440554868367808482474612284121509852204668444865077046627788540467448631805821949041098495526137986285739540540822269925507714733927172404908777364771872447417947328157641542353467539077768547106391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a09f6e581fe2086bd5a26685fd3174b21f43c9a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giovanny.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f9f6b07d9000004030047304502203376a9a24cd877a5c19bcf37160fd9cc164d06ca2cfc1e362b89a0e38d14fd090221008957a9202ac7536cffcddf12f4e2b31730ab7a5bd3bda634686e6c317da2093100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016f9f6b07fe0000040300473045022100c5b91e01f9f0d3c0891317b1224b9f39a68825656023a7aa4d7f56f3846bf584022027e16fd2fc6e439ca56d786d4cbbda729a4ba7a29026dae0c7ded9bfa766e56d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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