curio.io

Issued by R3

About this certificate

This digital certificate with serial number 03:43:be:2f:31:cc:9e:ad:57:aa:cd:0a:91:d5:05:99:6a:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=curio.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:43:be:2f:31:cc:9e:ad:57:aa:cd:0a:91:d5:05:99:6a:79
Serial Number (int): 284388574746184826066225008258572621539961
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:7c:15:a2:ca:42:86:cb:96:0c:89:eb:2b:8c:0d:99:0d:02:bb:51
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f3:b9:40:e2:a0:1e:3d:3f:bd:a9:e0:98:06:5d:6d:45:96:7d:7e:40
Fingerprint (sha256): 81:47:26:72:2f:1d:67:70:5e:37:02:5e:13:0b:5d:7e:fc:ef:6f:f0:2a:e6:e1:42:1d:49:dc:8e:f4:91:e3:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate curio.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for curio.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

curio.io

Other certificates including the domain name curio.io

(limited to 100 certificates)
www.curio.io
ask.curio.io
www.curio.io
curio.io
www.non-judgementalhealth.com
www.curio.io
play-dev.curio.io
www.isacampillo.com.mx
curio.io
www.devfestnh.com
augustijnskeukens.ziggu.app
www.curio.io
curio.io
curio.io
www.curio.io
kiosk.mychronos.app
staging.signin.highmark.com
*.curio.io
*.preview.curio.io
*.curio.io
api-dev.curio.io
*.curio.io
*.curio.io
dairygoatmanager.co.uk
www.curio.io
monitoring.curio.io
parent.kidletcare.app
sb-m.co
curio.io
*.curio.io
go.curio.io
try.curio.io
sanchezdiego.com
www.perfectplaylist.app
curio.io
go.curio.io
*.curio.io
www.curio.io
flower.api.services.curio.io
curio.io
curio.io
www.optakit.app
curio.io
curio.io
curio.io
airflow.private.curio.io
www.non-judgementalhealth.com
www.curio.io
widgets-dev.curio.io
curio.io
admin-dev.curio.io
curio.io
*.curio.io
*.curio.io
www.curio.io
www.curio.io
curio.io
app.nuop.com
curio.io
www.curio.io
*.curio.io
curio.io
try.curio.io
www.curio.io
www.curio.io
lalysavatar.virtueandtrade.com
www.curio.io
*.curio.io
curio.io
studio.beta.curio.io
sanchezdiego.com
www.curio.io
tsumoney.app
links.curio.io

Certificate

The complete raw certificate details for curio.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA6daIbzFvr1jVkwrenE
5+eTxRo4WQDLNbMlC/txTjb7ah6X2AmxSUGnCSvFDmzO+mtc+mBIXpgLomXTsGDx
CuMkYIWZdfllZx0AKwSo4naflWipHrao1J17Mbfd/aTWRIvpHveVV5BirgEkl6Oi
5qPnHxacZEvXaeww3nnzTq21HcahQUgQ592bNU6KpFE3ibz56NxWGT/ooQ8SQX5J
N+I53rGcLANoa1rXndlgejI+xUL5L9u0N1rnTo57PCRn5Yelvb4kmc3hnBKN3W7M
mW2KCRbW1lUZDGjI9mclIF51giQoGFcYNnsD6ytyF60n8J+OXJWbPvYYfNZa0diS
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284388574746184826066225008258572621539961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-05 08:35:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-03 08:35:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'curio.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24749914637409000755671690864419894018797526727422043723163706886554811442299699263895192550499880456604992946627645610544779876951942038006702804209508900923132372951099569828624045574858043813990997609538200299168516394712024105080919823062226519251786487111614511973485604570173764660340877013778550704833727857653238176869546706103497693012842240665184115061196029337291939673978424463187783491820797739760611387493425946734638183830293436081066034798979657567474935005209008925022690065633204891943819503578121512799538713571203347045435843170196838193540202446257871068345796488436491904297532238158879394403067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb7c15a2ca4286cb960c89eb2b8c0d990d02bb51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'curio.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e0df7ae3a0000040300473045022100cca558d4534e317edc86193a4be78fd7bb385882c3e47394ae67b451ea30e3ff0220512fa4eceb5fccb42bfb751bb4f7b59e28473247421023db520869f303b498c3007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e0df7ae490000040300483046022100e910876a7b884dda4e51d7e0174c99ee58fe79d1c3634304f9a366f4c97616fd02210082729ed24a5318bbeb6d448f084becc0eabb652299057b94845f8d0d8a35fdac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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