www.lorenza.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a8:57:90:84:ad:06:7b:74:bc:9f:c6:2a:d0:96:41:7e:6c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lorenza.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a8:57:90:84:ad:06:7b:74:bc:9f:c6:2a:d0:96:41:7e:6c
Serial Number (int): 318620688655365864454036752031680976485996
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:31:29:ac:58:95:9c:23:3e:5c:9a:62:6c:09:21:c9:cf:7e:84:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:98:84:c2:16:9b:88:78:76:be:38:0b:74:a2:32:4f:72:55:03:0e
Fingerprint (sha256): 7f:f7:0b:8c:19:9a:b1:24:c5:07:b7:6c:1f:a3:aa:ca:f5:b0:7d:25:a8:5d:d2:66:be:64:a6:70:17:7b:0b:c1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lorenza.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lorenza.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lorenza.co

Other certificates including the domain name lorenza.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lorenza.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318620688655365864454036752031680976485996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 20:59:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 20:59:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lorenza.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769729217018605947994838117640925713727456586849291847886446801433970165836619136818704236371397754965292972472909437059000985880639697484530426835439244760986263946220059682991847250428871886552830228265246361866138007231535458986641258343998095457627802832725255634504284832572353520066815427528968415031198708474841713877633104246317607300405212508235872058164401468254584752895975704013528037689483319222502217380773708809392029978459115657699600343789337822564807644455021697614858237079602435409104029995021630585261205762150135385381740318113824304742651304140785584923925167357389962748290974226651833965390707609828621149151459753840050400347015804488019736735304930823275274718156464219522659863866146793394691727798673975847779663547346293512118950889579024728790019270026020071606962651932656433646157282249573243616413028851024801544870029764743281671129182518849505708644728345890544544647539595447875489476549052741225106533784674409603121659698144877913962969038302333112469553249806072792463677688010369478515972331214039045316688205338473791075053127091671232306261170412902771488132988423300664509619922844692735271426538537433312803210723769450823695912499916133746870190080323824112509962709721930865808741113029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							913129ac58959c233e5c9a626c0921c9cf7e84f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenza.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3a98ce63000004030048304602210086ff78284309289e218c6d2a33dbcb9429a072eb8bb95cae8ff2331130657c33022100a165aa0238a61bddd9336fe116df44e8ed469cea52e2910d4ce949d05d3e3241007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3a98ce500000040300483046022100ffe67a4154a8bd74695905d8a5ab45d4c311e791c483669a9cb3cbecb084c962022100afab59c168295af3286b25822e264386316f1a4cc6ea58d40ed5d40b7f6aa353
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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