www.ludovico.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5b:e4:9b:bd:22:d4:5f:b3:7c:f5:b0:21:da:8d:3d:48:84 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ludovico.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:e4:9b:bd:22:d4:5f:b3:7c:f5:b0:21:da:8d:3d:48:84
Serial Number (int): 292606425810273072965637664555280306620548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d8:ae:82:96:2d:df:7b:34:2b:e3:2d:56:5e:33:28:c0:ef:a8:c9:fe
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 22:9f:e3:ab:90:00:0c:17:f5:ae:9d:1e:ec:5e:94:d5:f3:a9:0f:a3
Fingerprint (sha256): 73:17:b9:26:a9:6a:b6:86:61:6d:21:2e:36:a9:70:7c:ae:a4:58:56:e0:73:c6:35:4c:d2:ff:25:59:b2:62:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ludovico.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ludovico.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ludovico.co

Other certificates including the domain name ludovico.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ludovico.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292606425810273072965637664555280306620548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:06:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:06:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ludovico.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761579254347091701584124088389515384341773585245542438454524654083207097896101430029234668232335747541705727149907465157812069153846433485101941245467225367274225500389187755703602564329967795879754123246498084774495092166670225274199213556500624086568505935139483493775278183288007398013489149146494568746437864996072694013629660245832185183959763784058044796198657069285183184380217670912102828394994339979681756974882643336093175905095567869437934752709188178991312717193494573260953251369265709855443327865918603588846890666258076275786061332873492469279622531113582778658744416898422537490246748161523823251675482360804952054920666121339602238807196687505106923036915743516330958131269081797481174981858517037689985100059829163070243071871663324010956261392056722025879325729025543355491388598203239784836545879572963892240364309086838086440663924943289286609612874493518793362531371308463044406015754999031853432164388323185198878467052263755940311579712583134257172797849387627831778109815884486536019654587277797494722156254199603991691050292502682600175545810556415749021410590756943742097730581262133723725885844415200646357366566001590156748876099052727877948337845249588792855622774599786316987977911864992507065815136209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8ae82962ddf7b342be32d565e3328c0efa8c9fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ludovico.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff9faa3a000004030047304502205f1c2f19a381d46a98ee781b4852227c0fa90acd6fcf64d4475137a4aff4e356022100ef7e7600adfacdcedce4bdf726a2e60ee1e8df2c424ab3f1ce6a42c9c03417d900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aff9faa58000004030047304502210095a5ef1fe955845787251b605789b04d11d93cfae0e0933094b392321c31945b02203bf6b0e8ba364b927192ac1fc24891291736c2fb4a75453eecdb095591909753
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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