www.ludovico.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4d:79:f5:a2:83:1f:01:2f:6c:a2:94:49:d8:fe:ba:c0:5f was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ludovico.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:79:f5:a2:83:1f:01:2f:6c:a2:94:49:d8:fe:ba:c0:5f
Serial Number (int): 287700712044552158029066600246268317581407
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: fb:eb:e0:67:b1:aa:b9:7d:e5:94:d3:e1:6a:e9:7d:b8:73:4a:26:50
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): cd:d7:73:94:34:fe:c5:4a:66:b2:35:8a:aa:82:0e:95:3a:9d:6c:22
Fingerprint (sha256): 77:48:c7:13:0b:89:f1:a4:df:25:5e:53:46:8e:eb:62:c8:77:cc:cf:f1:dc:49:db:8d:c8:3e:c5:7b:b4:7c:1d

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ludovico.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ludovico.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ludovico.co

Other certificates including the domain name ludovico.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ludovico.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgISA0159aKDHwEvbKKUSdj+usBfMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMzAyMDFaFw0x
OTEwMjYyMzAyMDFaMBoxGDAWBgNVBAMTD3d3dy5sdWRvdmljby5jbzCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBANsHFVV+F3858vh0c6SEn5ayjIs7kgFj
cmVk/xEqeu9K/RP3NqTdd+M5M3N4Ad8vAunK4KD14MbFGoIVjVoCCWrqCqopLIbN
VhnQ0GScfYehdfvyc3IUYEYDQAdPKvRKEl3ExyVlSMh1VF8aCvMVHcEnuDN1p6Fk
CJasmwQZAxi3NrC6yjOizXM1f4zBCAiROTr7XpUieqFehXXObbQmJtYtEHG3+FpT
x2RR8lANvWYaXtel9SsdbQGktmpWOEOoMK13uqJQfKBVrUTISFf4Dh1AbgHJmUrZ
vCt2pp6zfnS1kVfH+Qtew7rnjP0QMUbdElLH1FoSj9kjcXAltnkn5CO9CHUJcxPl
lNgKBpmr80nRM1ZeOgKp5N4dXcCHe4JuJqELykh8BTYIuR4t0VeFHT5wsiLm2Aly
OnPV6lrxtSrOTEc9IdW4cPf1Thr1GZ0Vn0OZIePH7t+OLySXv+vu+qUsx+OdFbCZ
djb+mTDzFq2XsSy0OGLDbVPm/xJnB3lsVmhCbZEt2cP84ndnhjtgLA8WP3el01U6
9qFjIjeQuMZcvFipBe7AmEU/1hhqEyUs+gsaZWMlR42AGZrDjNQjWXJ71Djb7ewi
HYd4HYe5pFp2nFXcOmjabjPhOk+sWwdHDZOavyg7rKHNJjQhnAWji/EesmVFtx7T
ied47sko4iTrAgMBAAGjggJkMIICYDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFPvr
4Gexqrl95ZTT4WrpfbhzSiZQMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wGgYDVR0RBBMwEYIPd3d3Lmx1ZG92aWNvLmNv
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB
9QSB8gDwAHUA4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsOwix
xgAABAMARjBEAiAeaivELZl67deh9QX0K+C0bj7aOgflofLU3BPTpcSs8wIgR7vl
0mO0d3ZfSj7zjGAT0qrehfpgXbnQzQ7144wahdcAdwApPFGWVMg5ZbqqUPxYB9S3
b79Yeily3KTDDPTlRUf0eAAAAWw7CLPYAAAEAwBIMEYCIQCrJrznJ4S47Xnv+PXO
Ai2jr3m+oPcJghl4+MWsjOWftwIhAL422q1OIYD2pKSEUymQ5qVvEk1syg+s2ioX
8aDKUAQiMA0GCSqGSIb3DQEBCwUAA4IBAQBROH9UDgVnCJxSTyP3OyExtgFGrZQd
+PKCc82yddHs2ILN5+le9FlAYXdmEH0MeZAcA6KmU9/My6RM+be9TccWpec8VG6p
3qvfxFZ/xN2hoozaLmvPAxkM5COQbV3dVphRoPXdA+WvHex5p9H5obVYs56isgu1
ye+30/5NzbYCMug8RrwDKFmv0ofYp0NvJL0uD09Ep0frzDSHSS1el6RWYJhfjDzm
pQahq7ZA+1ruD07pxpeILWbWDHCB6Q9TpQHJiYnLL6foKMmhpvY4d2HRmBLriT4j
TU/5ur0IUY5U4ui057+Jaj/lv4IBPfESH9X6Q1Je+1eYmw6XJjgwg/Kg
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2wcVVX4Xfzny+HRzpISf
lrKMizuSAWNyZWT/ESp670r9E/c2pN134zkzc3gB3y8C6crgoPXgxsUaghWNWgIJ
auoKqikshs1WGdDQZJx9h6F1+/JzchRgRgNAB08q9EoSXcTHJWVIyHVUXxoK8xUd
wSe4M3WnoWQIlqybBBkDGLc2sLrKM6LNczV/jMEICJE5OvtelSJ6oV6Fdc5ttCYm
1i0Qcbf4WlPHZFHyUA29Zhpe16X1Kx1tAaS2alY4Q6gwrXe6olB8oFWtRMhIV/gO
HUBuAcmZStm8K3amnrN+dLWRV8f5C17DuueM/RAxRt0SUsfUWhKP2SNxcCW2eSfk
I70IdQlzE+WU2AoGmavzSdEzVl46Aqnk3h1dwId7gm4moQvKSHwFNgi5Hi3RV4Ud
PnCyIubYCXI6c9XqWvG1Ks5MRz0h1bhw9/VOGvUZnRWfQ5kh48fu344vJJe/6+76
pSzH450VsJl2Nv6ZMPMWrZexLLQ4YsNtU+b/EmcHeWxWaEJtkS3Zw/zid2eGO2As
DxY/d6XTVTr2oWMiN5C4xly8WKkF7sCYRT/WGGoTJSz6CxplYyVHjYAZmsOM1CNZ
cnvUONvt7CIdh3gdh7mkWnacVdw6aNpuM+E6T6xbB0cNk5q/KDusoc0mNCGcBaOL
8R6yZUW3HtOJ53juySjiJOsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287700712044552158029066600246268317581407
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:02:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:02:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ludovico.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893554931711744532911748698264972354826889766595956970868829638075353885227245718231436607139455190357425971041287551090562321025167180823601342713445745264737535468236362813483185385953338663041248424562717574603039239458440717879426197288573761289742039275338190538722474518713598725292641746706914823598867833354743487088099518511983572009939953134263024361130268764418075991740075415049580123655890784246427500775336901592604059679256169537421219243929214278992696627507677599333707426765062817800278199245981552196200488928037870776356940008605258652911593024339530999633025780642297920897630993419491823655182000714137285386725985252845197211765814620457951163052602739123404536670528209950605899363100979506128137747210115382957063048878194875199283527077657163501153725967700103843134427740760955565312929602522021539154814539347520848254440207397708589885928759905296256081319901470675269111112209061265621722126109306065435616883890702623767062654489185910528816813099011256366987506529956648072514545874950221141224645993345954041838138918664429966157179419230969821957103895108675328973545724780497690476462035093854337750998872260229088120645208038055590762536615283633999155621639788347427018394405819082299504431604971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fbebe067b1aab97de594d3e16ae97db8734a2650
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ludovico.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b08b1c6000004030046304402201e6a2bc42d997aedd7a1f505f42be0b46e3eda3a07e5a1f2d4dc13d3a5c4acf3022047bbe5d263b477765f4a3ef38c6013d2aade85fa605db9d0cd0ef5e38c1a85d7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b08b3d80000040300483046022100ab26bce72784b8ed79eff8f5ce022da3af79bea0f709821978f8c5ac8ce59fb7022100be36daad4e2180f6a4a484532990e6a56f124d6cca0facda2a17f1a0ca500422
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0051387f540e0567089c524f23f73b2131b60146ad941df8f28273cdb275d1ecd882cde7e95ef45940617766107d0c79901c03a2a653dfcccba44cf9b7bd4dc716a5e73c546ea9deabdfc4567fc4dda1a28cda2e6bcf03190ce423906d5ddd569851a0f5dd03e5af1dec79a7d1f9a1b558b39ea2b20bb5c9efb7d3fe4dcdb60232e83c46bc032859afd287d8a7436f24bd2e0f4f44a747ebcc3487492d5e97a45660985f8c3ce6a506a1abb640fb5aee0f4ee9c697882d66d60c7081e90f53a501c98989cb2fa7e828c9a1a6f6387761d19812eb893e234d4ff9babd08518e54e2e8b4e7bf896a3fe5bf82013df1121fd5fa43525efb57989b0e9726383083f2a0