buongiorno.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:89:45:5f:e9:45:27:02:a3:a1:77:f0:07:15:22:c4:88:36 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=buongiorno.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:89:45:5f:e9:45:27:02:a3:a1:77:f0:07:15:22:c4:88:36
Serial Number (int): 395160042726400530055115416992287901911094
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:3f:5e:2b:70:24:1a:6e:d2:47:41:31:ae:31:eb:9b:33:ab:2f:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a7:05:76:b3:22:df:b6:99:95:ca:60:d5:7a:df:b6:79:30:a5:bb:d1
Fingerprint (sha256): 82:22:41:9f:88:f3:d8:a7:24:eb:b9:c0:c7:e7:b9:fa:3c:72:c9:2b:a3:e3:72:56:c1:f0:cf:5a:cc:6e:f2:44

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate buongiorno.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buongiorno.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buongiorno.co

Other certificates including the domain name buongiorno.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for buongiorno.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 395160042726400530055115416992287901911094
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 10:30:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 10:30:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buongiorno.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779706852887003671105929233563044107949153161288526339255553452319185302907433169868803697881204687166893834314174548769971208485084339184888142539900225384086069553802674444681128434440207384827593363964250157872002162400515333676460710130880729246248637828886272933468571024029724223964761352033390687377660522721474222294899321582012221212752071661270063282798644234695357930851968331965364490742468744266767599765680998410519240239151053026333046399582028093813601874381745876804558027532187443649279284304968689584523341987884379921322278495723105851520014070096704923010890278848380934774013740448540545004229798181438404466012703430135750975386315617523991314694961448429367931992022470463902523408369500314660179055272071733116389894882073663891329152006365932031511239637489407091153818861406164652461921544541089767664097946014622085725154056285634781329651614937696356676382112127678392406955994780435938119565747509914092700264876723860495015656726020231045866184706214914090276786952503225917708373251043108176369203748784811230666678741452628913364125253878519451215568727750741345412521049393838283169073199836570078844488926146336512754707285454406288155428428591238864165498567048351713017405186139299036540048667691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca3f5e2b70241a6ed2474131ae31eb9b33ab2fe2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buongiorno.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700ad0f1470000040300473045022100c488782806de57beee47a9d4bbd5b39855fc3fa5f09fc9c076367782341145f302202495d614233a0db31581d26b73f20fb2680b5fcc771b5588d7c9dc84aa755dfb007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700ad0f142000004030046304402204c2768932cd8540ac8c3549ced2019c1a57f4b95819f660fb7e3b4b29e298e7302200a086663e5219e41d1dfbda1489338bf71645362cbab15a98d785e902d076546
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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