www.lorenza.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:ab:97:c2:d1:82:6c:53:53:25:bc:0a:0d:5a:16:42:aa was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lorenza.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:ab:97:c2:d1:82:6c:53:53:25:bc:0a:0d:5a:16:42:aa
Serial Number (int): 280961038685265604813183329180790883238570
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:67:1b:e7:c7:28:4a:b5:31:2c:a3:7e:69:a7:44:18:71:e7:39:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:b7:59:52:ee:0f:66:21:63:5c:3b:77:d5:97:ad:48:3d:fe:e7:4d
Fingerprint (sha256): 80:82:4c:ea:c4:68:f5:d3:d9:8e:25:d5:d5:28:49:d3:87:5e:6b:1d:e5:16:f1:62:40:f3:76:0b:c4:88:59:b4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lorenza.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lorenza.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lorenza.co

Other certificates including the domain name lorenza.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lorenza.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwTBqZX5cYZov10JKiYlg
wPy33JntX97/nIpuisY51O+l4E1qvtOKUEPpi8U+NkqHjI4giaU8YFWFOmug1N4L
2ErnLGocDnHEdBE68jVNNuJfLmtRtz+/euzO+thm9EJ72zY40WG6Tm9ncoq4hLi6
s4m6uJ4J/9FGHOeg4lcFGN+yNj9SstVUggG+oCpeICQl+beUYg45Zgpl7KIu0UtT
Vt/PaAcWE84mzGGYEmxdcq4re1xNNpcZ+iKhktsYmIuS4JOmbCAEuuE3lYeK2drL
PHAyZDtwIe1BROax9W5melkLTWfDfJw7nmar8bknE39gvmRUgaW/v6FQnU95ip0M
bqxS8I362DlR7u5jZ4TbebHRU4yWvZCMML9JhmWzWl6uhnykmj4F8sNqrcm6QzuN
BiswjrICXnp75zXghHioItoeUemXDIgZqdZUaPy3BK5zpplBBlIP7Aa84RI3/0Mz
dQ1IhXbn4SScoESGIXQ8h+/t4nlsTaPOdNks41Hp/ytCMVxLvCPABmK1PzTbYGdH
SQABjjCut9FHU3avCD7WC4MebuPQDb0mAZPHGOY/faUU0RvAtoaK+Skd1YZV3Pp0
zs55xeHMO3wRelZelOYaJzGevy9LRQhrk5cB6jZgPEXnfxVPYY45OEZ6CK+xf5fF
pDCmiF5VTu7dvDYJwGh21CsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280961038685265604813183329180790883238570
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 16:09:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 16:09:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lorenza.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788142861615801576782767292124830048082221676266002180255575788416605322765394660582232357053283020733047290893482696930051358428743237310806095777725594310987281149443327664504214643204500640448532891190784474616104471544300442531635687404733144584074744509562078030362675008517537808850508629052245240125466480507985029066427688382409513035501431131536240915442704308674953204482254676170314734567362156086117331728440715806993086269597367926769698899705794137821296364538006626070717440139773724242760505603702920278467352388960436466872042011034649358181883563473739662473359874010244762573474212981459085029110168631509649918063200211006143092963357840980715114503306070946064337857470780594624752666919989102166078296940175160737415186785001388413222295840854157185410437317947441981712758391738929894455667935186050948669589935429737446591384565250692283429395035009546428087113429849564762698116186522781782338465050872804386846257753601494116075213886971279311632617149334721632613483608384680688580799175197230813368083819066808855435501151426702416955164831224697748272460367552222578960411697169255248908925045503594096235474611698913467921302780231130291425025521987219584830457291774129221807906200708222989965345608747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf671be7c7284ab5312ca37e69a7441871e73956
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lorenza.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aff6b35f8000004030047304502210088c95147c283369057e7c62e1491465ff56b57321298bbc71761b3b751706a2402206fa8d3e3c99c1aabeddc91abf0a9c636af7bf924919e8b5753a6e840794c1da800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aff6b37490000040300473045022100f21a73275a7f8a98fb4dac70815286efeed1562b29e13241a265067e9fc1ba2502205d04633a0801d2201aaa5efaef3d517cfac4dbb501c2782963c719b71046e56a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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