www.ludovico.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:5b:e4:9b:bd:22:d4:5f:b3:7c:f5:b0:21:da:8d:3d:48:84 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.ludovico.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:5b:e4:9b:bd:22:d4:5f:b3:7c:f5:b0:21:da:8d:3d:48:84Serial Number (int): 292606425810273072965637664555280306620548
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: d8:ae:82:96:2d:df:7b:34:2b:e3:2d:56:5e:33:28:c0:ef:a8:c9:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 22:9f:e3:ab:90:00:0c:17:f5:ae:9d:1e:ec:5e:94:d5:f3:a9:0f:a3
Fingerprint (sha256): 73:17:b9:26:a9:6a:b6:86:61:6d:21:2e:36:a9:70:7c:ae:a4:58:56:e0:73:c6:35:4c:d2:ff:25:59:b2:62:73
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.ludovico.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.ludovico.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.ludovico.co
Other certificates including the domain name ludovico.co
(limited to 100 certificates)
erminio.co
www.coingiftcard.co
www.localaikido.co
www.ragioniere.co
www.alert.tools
www.ludovico.co
amaretti.info
www.aucklandflowerdelivery.com
www.ludovico.co
www.ludovico.co
ezbitcoin.co
xrforyou.com
www.valerio.co
ludovico.co
www.organicmedicalcannabis.business
www.dizayn.co
www.tankcryptoupdate.com
hotelinsicily.com
ludovico.co
324.me
sanicast.com
npbauctions.com
www.edmondo.co
www.tuqr.com
chiari.co
www.coingiftcard.co
www.localaikido.co
www.ragioniere.co
www.alert.tools
www.ludovico.co
amaretti.info
www.aucklandflowerdelivery.com
www.ludovico.co
www.ludovico.co
ezbitcoin.co
xrforyou.com
www.valerio.co
ludovico.co
www.organicmedicalcannabis.business
www.dizayn.co
www.tankcryptoupdate.com
hotelinsicily.com
ludovico.co
324.me
sanicast.com
npbauctions.com
www.edmondo.co
www.tuqr.com
chiari.co
Certificate
The complete raw certificate details for www.ludovico.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISA1vkm70i1F+zfPWwIdqNPUiEMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzA2NTRaFw0x OTA4MjYxNzA2NTRaMBoxGDAWBgNVBAMTD3d3dy5sdWRvdmljby5jbzCCAiIwDQYJ KoZIhvcNAQEBBQADggIPADCCAgoCggIBALqtiLey5ic9gKfVZKIphecYWcGjsDWn zwSn/qwJm08ExAv2ftcyaZnSXLaVze+46m5G1Is6zht+Jr2M27UvM0/hRONbrHlc ygxCC8GHp3w9Xw739+io0eSpGJFLskrIaWriJEAqIVY6MbbBFMqtRZ7ro4STexHg nEpwFjSqTwQzD9jGFdf77ND3H86C5y8e675X7cCuWFBupAkhYDuSyDJd3RXcjcBd gORM63uOeo7gP4R//HtWKk95fLOI7lKaffFvpTqaON2Q3rdSAkC6zvrSMwqPpMS4 Yulj8cUzPw364RADCyaZ/GiHXVCkj64H307mrv+dNvGgb8dJVUomNfQdow3VrRxL E38YyNLDjbckmL5UXoAmuObM8cA7vXCShtBFh9KsQ8k8NHIwDRReDXCOXFIOhGRU vr/lTWUXADvIC81X/81jmvD2aK3zxJQaCb/2etcdyFvTHYDSjsfZFuYMGd9MbLhC F8/4L442pQ5ehdah1SWkiqi0m+4wMCd2DJW/xQf6QlTft/s18Oa9s3nu5oUoZtXT dmXKw8oabJ73quK9kLrRTU9B+ccv5ZEJP66i776jz4huubSStBA/C/odZgKJILnz L/DUFJxyVSU366fcCRPv39JbuEJGmVbTFckqJdKhkUBRd02Z3ZepEKlF6nXmS+4/ mKKS2mQM2ffRAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFNiu gpYt33s0K+MtVl4zKMDvqMn+MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50 LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3Lmx1ZG92aWNvLmNv MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFq/5+q OgAABAMARzBFAiBfHC8Zo4HUapjueBtIUiJ8D6kKzW/PZNRHUTekr/TjVgIhAO9+ dgCt+s3O3OS99yai5g7h6N8sQkqz8c5qQsnANBfZAHYAY/Lbzeg7zCzPC3KEJ1dr M6SNYXePvXWmOLHHaFRL2I0AAAFq/5+qWAAABAMARzBFAiEAlaXvH+lVhFeHJRtg V4mwTRHZPPrg4JMwlLOSMhwxlFsCIDv2sOi6NkuScZKsH8JIkSkXNsL7SnVFPuzb CVWRkJdTMA0GCSqGSIb3DQEBCwUAA4IBAQBQ6fLFSmRZXPhXZnsF2e30iOqSBcgY ReLSqQ3DsXNpOyUUtS4AYA7ygWgQQBLMxWIYr1JG10ViQvfU94ep2xENVbI6CydA Qi7wMxETCfnNV8tG9GGeLFUzu7iH5wzsriDwZQa/FIijUXpmbljE3g95cHo0dl4J dMvf1xOOzZRAd7o77F6weFO3CgZR5ZBud/oXPmyIcu1brhkrgn594xwjDjJXqh1s yqF1pzaLgQOY+vkBtlwxVIcg2OkJi68geewfk6d5eRJQE6LIXVpcYZ9rZNpnNRQP XPHeNX6WL/sDuw736jPZj0zfHsKjFmQ/OpiQrTb92IrhL+eg20VWADst -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuq2It7LmJz2Ap9VkoimF 5xhZwaOwNafPBKf+rAmbTwTEC/Z+1zJpmdJctpXN77jqbkbUizrOG34mvYzbtS8z T+FE41useVzKDEILwYenfD1fDvf36KjR5KkYkUuySshpauIkQCohVjoxtsEUyq1F nuujhJN7EeCcSnAWNKpPBDMP2MYV1/vs0PcfzoLnLx7rvlftwK5YUG6kCSFgO5LI Ml3dFdyNwF2A5Ezre456juA/hH/8e1YqT3l8s4juUpp98W+lOpo43ZDet1ICQLrO +tIzCo+kxLhi6WPxxTM/DfrhEAMLJpn8aIddUKSPrgffTuau/5028aBvx0lVSiY1 9B2jDdWtHEsTfxjI0sONtySYvlRegCa45szxwDu9cJKG0EWH0qxDyTw0cjANFF4N cI5cUg6EZFS+v+VNZRcAO8gLzVf/zWOa8PZorfPElBoJv/Z61x3IW9MdgNKOx9kW 5gwZ30xsuEIXz/gvjjalDl6F1qHVJaSKqLSb7jAwJ3YMlb/FB/pCVN+3+zXw5r2z ee7mhShm1dN2ZcrDyhpsnveq4r2QutFNT0H5xy/lkQk/rqLvvqPPiG65tJK0ED8L +h1mAokgufMv8NQUnHJVJTfrp9wJE+/f0lu4QkaZVtMVySol0qGRQFF3TZndl6kQ qUXqdeZL7j+YopLaZAzZ99ECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 292606425810273072965637664555280306620548 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:06:54 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:06:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ludovico.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761579254347091701584124088389515384341773585245542438454524654083207097896101430029234668232335747541705727149907465157812069153846433485101941245467225367274225500389187755703602564329967795879754123246498084774495092166670225274199213556500624086568505935139483493775278183288007398013489149146494568746437864996072694013629660245832185183959763784058044796198657069285183184380217670912102828394994339979681756974882643336093175905095567869437934752709188178991312717193494573260953251369265709855443327865918603588846890666258076275786061332873492469279622531113582778658744416898422537490246748161523823251675482360804952054920666121339602238807196687505106923036915743516330958131269081797481174981858517037689985100059829163070243071871663324010956261392056722025879325729025543355491388598203239784836545879572963892240364309086838086440663924943289286609612874493518793362531371308463044406015754999031853432164388323185198878467052263755940311579712583134257172797849387627831778109815884486536019654587277797494722156254199603991691050292502682600175545810556415749021410590756943742097730581262133723725885844415200646357366566001590156748876099052727877948337845249588792855622774599786316987977911864992507065815136209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d8ae82962ddf7b342be32d565e3328c0efa8c9fe . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ludovico.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff9faa3a000004030047304502205f1c2f19a381d46a98ee781b4852227c0fa90acd6fcf64d4475137a4aff4e356022100ef7e7600adfacdcedce4bdf726a2e60ee1e8df2c424ab3f1ce6a42c9c03417d900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aff9faa58000004030047304502210095a5ef1fe955845787251b605789b04d11d93cfae0e0933094b392321c31945b02203bf6b0e8ba364b927192ac1fc24891291736c2fb4a75453eecdb095591909753 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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