www.ottaviano.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:8c:15:61:7d:fe:cf:99:ef:ae:60:3b:8e:f2:d7:0d:1b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ottaviano.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:8c:15:61:7d:fe:cf:99:ef:ae:60:3b:8e:f2:d7:0d:1b
Serial Number (int): 295211015055473677311910280791094638087451
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e8:68:a9:cb:9e:43:b5:d5:ae:cf:11:5b:1b:ce:f8:a3:18:6a:7d:02
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:ca:3d:92:a0:cc:f4:6b:df:b7:d8:9b:b9:3d:6a:b7:e2:bb:1b:eb
Fingerprint (sha256): 7c:a0:6f:56:4b:f9:58:d7:ec:7e:95:12:ba:d4:ef:9d:81:b7:a7:0f:87:f8:b1:74:ff:7c:c8:fb:3a:83:40:20

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ottaviano.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ottaviano.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ottaviano.co

Other certificates including the domain name ottaviano.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ottaviano.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArdmWEBpXHHU3rNGnIVxT
QZL0Bgnj/OmQTnh1+vMMPuypjLxo50H4NrWSQsPmYjfy+MsUUu7B+5B/N1JeuGZp
BJzXbP9FElOlD74jhZDbPLOawcCxH+0+jwGJrIv0xwgq4eh8IOYZMy1Gwt0Nijf2
220d1G8YL4ueG7aCpFnJPgSMuil/lRqJgp7BD9+KAI+TC9LKOq5hQukS4XuNzlEo
beavumks2s/njHfa01EbSO+STeuzEv0g71xr5cm6iF74iHmT/P17bWjNUT0u2vla
laVe+ft/tQv7he3zOsn7qQdzmBqdbVpNBlDdRC5CDt1HKGvH0xtFuk+8ntJKQFIJ
xMrFHvSM+BHOx772gz5FaIIfe5EsjbhfiemD5nmALPpNsHFyTXylfRuXmGvD+ezW
636JpwOaPATczf3hymCQQCae0iVYO+T7p1mPeICkoVlNtaP5Ch2WY9qVDnH26CIg
qf+3SfIB5GpY9tgwyj1FA+h66mDaOgI0cLxKMbKictw3AgEv+6KkkMOPO/kpjDds
VJJ0w4m+az9izRYJA3n0TuysLASIdmXuatiuwFndxJy8b3wQbhJvYk2BTsP4OW+u
02f1Axm4LgO/jew9gz6zJKLG5vG15YrAunb403wg97BhnBfsEYyPreNRnbB+E7ps
tzTQ4whGErFURkUPkej0VikCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295211015055473677311910280791094638087451
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:02:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:02:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ottaviano.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 709245901039428759249422609316269177126080315994825482232701724409520195380557919925558939702052476185161839130078608741547199161758142434991929696532955318657997297915022371124588106094314468683492081611806632107619418221326454297453336825699937386090188036196099875040034677649100057722455361488412600765327053676863055110049482371044095454662466183077852834948935748079772604904430465011811303153156344481947225579820816032621378953624418351332838522310740568090799104385653850631355907721052965416425852954902477217732971604591580707834153760669819595086666471770804325475830713953646694994954433624807718905289599577521781891581346003575446878296952675437589727634745538371144053329126605894115289976343663828053222271909303838670246576087961978653061981701578203705620468676918445324580129251417666438697879160289776769710283298165056054151061546940622116788936831044701076037120538142297293325425064706012413691108901558652744493011826738951196385374155720522649845602011416110538600236203091639034890636057368196372767152242971949600308457227998633567954774480649849755490888392206290260167220090791452456940794864287625664306883058314506875001969189322384255772222715257937117173258676651693201120716040442822507947460154921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e868a9cb9e43b5d5aecf115b1bcef8a3186a7d02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ottaviano.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b096fd50000040300473045022100a3d3dd17ae15b13c16e895ba890563b32428ffc54a8210a512f50646621cba3e02201237315543e9fa0181c2b72349b93e819574fcd4aa67b7b2aa7830e2a8ed392f00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b096f510000040300473045022100a1b39696d47186791506988ecc25e47fe13e910df94ffd398df293b7f5980ecf02203a9334c1489222bd67b7b428dacc3e66beaafc4326777872e6dde8ba12d940df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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