www.otranto.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:fc:dc:ec:bd:5e:22:1a:85:60:50:b5:e5:62:82:f9:9a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.otranto.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:fc:dc:ec:bd:5e:22:1a:85:60:50:b5:e5:62:82:f9:9a
Serial Number (int): 294340077581589430891038835863450718239130
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 42:76:55:b6:04:00:f9:89:00:84:1b:08:4c:87:80:19:d0:6a:05:d3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:b6:13:84:1a:cf:c3:2b:52:55:b0:9c:92:d0:86:bf:d6:76:38:ba
Fingerprint (sha256): 7d:25:8c:52:cd:44:54:64:b0:0f:2f:95:37:6d:a8:ac:c1:35:3f:cf:dc:f1:a3:c0:81:18:d4:5b:41:b7:15:5c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.otranto.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.otranto.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.otranto.co

Other certificates including the domain name otranto.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.otranto.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu18s88fPlOrdDGusYMAA
9ATCFA6r9OnMTnvOCgpc+dS4KSiFNW9SZFqf1CHAkU7wkfmfYs/oVa61bbZgbPSB
c6pjPjNFnavMGJSqajLiqsEJXIPrM5f+YlIp+zPkH+jpeYIHSkARTwLxPUMLg37N
FNXbRhdPbYQJPwrmeAT14dXvpex6DyL+7Ja0w3OP4Cp1RYQ/USaHc5RxkfQOzjYc
P36hbmPq7EO1sKYYS5KL7wBv4eOp94JVmPmnP+0eYZm+k5unPbdMi5Np+oFatWdr
H/v6U+ebzGyXj2RdtXQ7O09KRai18PhJvHUu9HEN/iAhW/rnv4dm3ZMXyQdrAWAP
kmVDngo4lzoIxj7BbaNhUcRQT8Z45Ncc1ysmPtZmZI/F1Sw/NPkF7bpTBc3tmELv
Vd4Dtg1Vwk6vCUhvNRSX/vCgJ+I+AYUgq+Cnh/KgwhJAJhICc/dWffGrC3e4pF8n
GuC325el0nvDd9n9yx9xCTKqVeNQT9tTI3NYYC8C+YUs2+YVdv/LGX4+LmUjv+8R
Dx6iBz1ZaPPkj7pdMYWL2hAyHNGucVTL8JwEYVZn+tRkoVnbl7GFKdI2GFW9qf/P
l4zDnkUrvHkTfS+/vjDYZCIWYbOGbkkAjtGnpWlRpk7VYUDt2i2TEMWKH6miwjVi
v+iS6yja1Jc9ynkZ/xnWyi0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294340077581589430891038835863450718239130
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 18:12:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 18:12:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.otranto.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 764410169433542386664473861245134320264306057622156712799937933651995134014043318913353107873466313392495783763810533100204227165639396590914760207442240388418832561736374785570702578974628892425136343932105246039635019884901695462541458130256104773502896738584859525330943771373791371312227285781739825580354689106139687223725813708850798128303513769620934087509702206873341943215168244735648452920485772962460141573651864288520665590990438701004329519380142308253203876767809696171847395203783985599994792691664105312154451791495199709289295864837893374986688760699033974511450980799881893391649780246127755148448435545999591203582003127067226516806938089573374619656153382668520480651478598087496204188263678625718730102830584326513547366620766903520061881501613691810186095220393586994231648910373416684400818548899643090919815144956398288733460813848017555504969963606232492534284846875134585275949112714781374220989356557822744886720356618263938784246056377892683628699062535395005279576039929838545739791686329281986138305568900641552391948131441572869789231063112825647173239028009757796159966080161246578298096810538020253408392420938055872007724688004106821896508577608137997798827499177488241699752249069386271220053756461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							427655b60400f98900841b084c878019d06a05d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otranto.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016affdbf4940000040300483046022100a0466dad5f42b73699eb408c42b48a69a110ec81841a3563d66fd0a29916abcf0221008fcee2168c568f77498093e34a1ed6c96969721021f272bbf5a939257cdf37b7007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affdbf5dc0000040300483046022100ff03e81c5093c65506901792ad8541ac8754122ea92c4149e9d5ce5f32992a19022100cb7065890d5584eb0976de3de1df7e7e6a287d00fe9f263a12dd6da7b2dbf49b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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