assisi.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ff:f6:6d:80:4e:40:e2:2d:52:63:a3:e9:b4:69:16:06:c8 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assisi.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ff:f6:6d:80:4e:40:e2:2d:52:63:a3:e9:b4:69:16:06:c8
Serial Number (int): 348436420009789024139394605934134435382984
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 03:73:7a:21:e2:27:c6:05:ce:2e:50:94:4a:67:f4:26:16:8e:bc:22
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0d:3a:ae:d4:4b:f9:5e:63:43:70:e9:a0:c9:50:c6:50:c0:92:56:dd
Fingerprint (sha256): 80:42:f4:54:cf:46:e1:f4:35:85:cd:f5:d4:a6:39:5d:fb:a2:4a:fc:7b:d1:28:c3:df:48:b5:3f:71:ca:a6:82

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate assisi.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assisi.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assisi.co

Other certificates including the domain name assisi.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for assisi.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348436420009789024139394605934134435382984
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 01:02:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 01:02:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assisi.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706833833208428117834808828483759100330405876062148803929075149307907346475620114410184336655481442426861056341250804830805376199710285624786806668628818742196744537980837089826142988152192140805311994909553724647775239537864569600957357402176211777441177557607951259433264561285994568651244396483642753552792782296432751946310924024085492852871992589280032471142146884599833152327411033077905558212231346509201458120484217454974928998803696514545687770300090622012534601320360236841470456362077212341690118239886152212763428739471075865089820414096306775588817233566091849930600195473964604365283057955473021114064987854655768114298320500838231427352154932073732539510309585290348601939426677002480427003372444559926885348643120167309994770098431120512652557254188611062385837956317591134067589492338740295145731733426108991729551993707292217628159912371526370017201831990363546803081570860850564027757673779418508503966169715893539049529639586995922527300843103237487093463862405181568415937781286619095250056442608335855163877885624640893244681329839826259938834183053662896051916527364048619279998643148438387240304262274042008287552155421540001758464763977744637429833212418036381210681421239486355857674904798042606197291129687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03737a21e227c605ce2e50944a67f426168ebc22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assisi.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b7698a60000040300483046022100810231a07c268f5106ce0fcf21cd1c5f38330454c25993d936f659aa6c4788dd0221009e030e37d7528a2e8250112e1e8ee92c64c3a401d2ac7b583a8dfa428c04cd51007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3b769a7e0000040300473045022100bfb96ee9693c0dcfbd7d97422b7664b64dd7578316cebc99e02ae7171ba4272902203bfbdbe878e996178d3847b74f3378c1269c2a962a73cd732042de6468dfc78a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cd24ab0388dd8159643a9b268a20bb33d1015db83f0c23f77321c14f913d9e421fb5d7397578335d5407797b47e0e1af6c60608c777284c0e856e2d32bb2ad64ca9a6a3202e590e43b2f204e43a5e6b40c4dd8b5b1757d507da245958576b1f779c5b58eec0cbc3e74c7f9a3efc481e4daf690bbbc68a0c50a317c763de902d32794d28addf90b280a20b979b0d8e5968704f505b4b83723c2f983143a02e23db6d56f0968136cd236c2d58c6b24b8c0aaa83ddc50169bfce9e0ba1c8406f89f88647362e2b1cbbbc2ec984bad0c4d6662e5c77e5f9d2e9dba6e6f68aba4af7bbb1db6b0e5cf856302b6f870456507680a9d3c288fe6dd346bb8cae0eb78bc1