giusto.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:48:fd:a5:ff:ea:28:74:d0:eb:9d:dd:5f:db:59:46:ab:5b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=giusto.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:fd:a5:ff:ea:28:74:d0:eb:9d:dd:5f:db:59:46:ab:5b
Serial Number (int): 286174344816069910853538371811839622687579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:4a:5d:ed:e0:b1:92:5e:0c:7d:a1:04:b9:25:c8:7d:4a:92:3f:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ba:f7:80:2a:87:00:da:69:b5:0c:aa:1b:05:52:90:f9:4c:c4:c1:0c
Fingerprint (sha256): 69:84:80:0f:46:3c:38:14:81:55:f8:3f:1d:89:e4:55:00:43:ba:9e:70:21:0b:dd:06:45:16:85:8f:50:57:2d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate giusto.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for giusto.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

giusto.co

Other certificates including the domain name giusto.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for giusto.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286174344816069910853538371811839622687579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 16:41:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 16:41:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'giusto.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 843804303143406571579535180787992441007962741863770158235998720482024744884117343082412131693896162555198640643319568381564946262731617817130518572535347522141057259589075285053067508762077026002258844567608619523692108833081097541425081080288551637275778878517966734708508300308489106058757230165755233196038358228540307009351743267806945946157644261730978327446635932101720184217253547473232173351006388069983137142048300672130986018781919202055142970985922795252547882079819032214104160711855033755691784964345901396904242081315326829078541755255270346990697564714208099966554544565205663425348724143731193328361790686822342934091130809491466646320478352971390967135871352310214899054016232522781997588647778073462374803558062312437856314435192651098169433198037642208682968813070871703064790261161313052987467541896270785246416449036645588251382021273577148294981026529238483533976027039347309903639033590850682822809989839826061420165104648830784985523841307805779449131101082506359789388729381401099673636130664532894562822251858275012905895608968226532568852032027621216789892045804375846702586624926131717628682573607588655158862845093215329210147272522784674307528781387511382031517599512267006835993593989203726093652632411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d84a5dede0b1925e0c7da104b925c87d4a923f8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giusto.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3485f014000004030047304502210097aa6b4f2f89cbe8c2adef262181086748ada11be0baec43eb91e219a0c4cceb0220429c29657458a52f2b287fd24932e17f733d639c4f3954fe0b4ec6885dcae46e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3485f01b000004030046304402202b32b00e4f781600c06ec4e0b2c0597cbcd78308e7d3ca1a81a8e781563e8073022071e2b7793e857ddf372a4f8c9ddd3f8381cbc19401df6ce04b7429721a1681d6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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