buongiorno.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:89:45:5f:e9:45:27:02:a3:a1:77:f0:07:15:22:c4:88:36 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=buongiorno.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:89:45:5f:e9:45:27:02:a3:a1:77:f0:07:15:22:c4:88:36Serial Number (int): 395160042726400530055115416992287901911094
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ca:3f:5e:2b:70:24:1a:6e:d2:47:41:31:ae:31:eb:9b:33:ab:2f:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a7:05:76:b3:22:df:b6:99:95:ca:60:d5:7a:df:b6:79:30:a5:bb:d1
Fingerprint (sha256): 82:22:41:9f:88:f3:d8:a7:24:eb:b9:c0:c7:e7:b9:fa:3c:72:c9:2b:a3:e3:72:56:c1:f0:cf:5a:cc:6e:f2:44
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate buongiorno.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for buongiorno.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
buongiorno.co
Other certificates including the domain name buongiorno.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for buongiorno.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgISBIlFX+lFJwKjoXfwBxUixIg2MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMDMxMDMwMzBaFw0y MDA1MDMxMDMwMzBaMBgxFjAUBgNVBAMTDWJ1b25naW9ybm8uY28wggIiMA0GCSqG SIb3DQEBAQUAA4ICDwAwggIKAoICAQC/Hw0dxuUbr+GGCb5DoDOOgMnnkgiV/Has EIiug1SmgKt/MqKnnldvOt0cp17O4PJmLMXkc6YlbgHU/jtRjf+ZDqOy+YWPLWMY NVmFNjI5qpqXt4ssbv1sZIwwjCup3d3K7eXGk5mn3KbsCr/lTeDCmvr3pwfdlAfJ Zr0tT9eCmPpJWwWe1TlHlUWoIavTc6oQvq7G3JN9yeFayP6WbTWvvHUrxUGKSTbu Bg0OaGDlb0dK8rBylVTxHgFZ59BcGEYqyoUq1LUSrvqQIXFQyXWe7HWraBByS2jM GIu8/ROZD0AeZtLO9r7SnwUX5kT7juedYHlDsQnTYc72Qu1ORO14D0Zxop5Pfu5C BeHbSfLib+B9zb3DEPiqP7MQIFPTOj0ilZSR6eIWGQxyoVVMIKf2UBH1zeYbhNds JvXE0xM1PCMOP+vYm1Sp2T1CbL3h42sCpHcRD8RSZRa5qQCRlGTKYw9cU1aYeAA7 /TJbfRz3fySrQ/YA73SJG50K9m31SfIYROqmgdArcp4hq98haXj1g9xrM/xSIYqJ IiXOqNLzrzUhydi11M+6+NkBlkncoV+88budG0b4MLaa1g5gU0GgvDuPN+xaQj/Q fHSfWABVDGN0rpA0Irin2pYf4jcSrHjaSDO72Um8bmQSklvxSPESiQnQgbzEPV+P GhYTGQJ0KwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTKP14r cCQabtJHQTGuMeubM6sv4jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14 My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14 My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDWJ1b25naW9ybm8uY28wTAYD VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdgDwlaRZ8gDRgkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXAK0PFHAAAE AwBHMEUCIQDEiHgoBt5Xvu5HqdS71bOYVfw/pfCfycB2NneCNBFF8wIgJJXWFCM6 DbMVgdJrc/IPsmgLX8x3G1WI18nchKp1XfsAdQCyHgXMi6LNiiBOh2b5K7mKJSBn a9r6cOeySVMt74uQXgAAAXAK0PFCAAAEAwBGMEQCIEwnaJMs2FQKyMNUnO0gGcGl f0uVgZ9mD7fjtLKeKY5zAiAKCGZj5SGeQdHfvaFIkzi/cWRTYsurFamNeF6QLQdl RjANBgkqhkiG9w0BAQsFAAOCAQEAnK7I2XifquW1wvr27eMDLCuHL4SXZtF2v4cc hpvv/peIIflIWhM5vOZn0t3PI9PF6hFfv0zq9QC6vzHMplko7ube/QUpkSSbkgSR QBn2Zo5jRYT+1f+vymfHL5IVLIMRzlKd0F8BQ7ebU0tSOhSHa6KczbFTPyekgjoi mXqfsUVON1ugP6pSd55h8bnXtKR69UPBKNkIZpj8hmv3EqxfT/EZLDDvT9IFXXkm 98pq8dgKWxM6o4G6b9eUkFdvXjKhJc+5JPVftEW7dixJcOS285KKjGtzrzbP+807 8yRCGM1N5C3VT1Ug77NK9bir9Yk3nqoS/BVWemj+Mv7hfFOosQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvx8NHcblG6/hhgm+Q6Az joDJ55IIlfx2rBCIroNUpoCrfzKip55XbzrdHKdezuDyZizF5HOmJW4B1P47UY3/ mQ6jsvmFjy1jGDVZhTYyOaqal7eLLG79bGSMMIwrqd3dyu3lxpOZp9ym7Aq/5U3g wpr696cH3ZQHyWa9LU/Xgpj6SVsFntU5R5VFqCGr03OqEL6uxtyTfcnhWsj+lm01 r7x1K8VBikk27gYNDmhg5W9HSvKwcpVU8R4BWefQXBhGKsqFKtS1Eq76kCFxUMl1 nux1q2gQcktozBiLvP0TmQ9AHmbSzva+0p8FF+ZE+47nnWB5Q7EJ02HO9kLtTkTt eA9GcaKeT37uQgXh20ny4m/gfc29wxD4qj+zECBT0zo9IpWUkeniFhkMcqFVTCCn 9lAR9c3mG4TXbCb1xNMTNTwjDj/r2JtUqdk9Qmy94eNrAqR3EQ/EUmUWuakAkZRk ymMPXFNWmHgAO/0yW30c938kq0P2AO90iRudCvZt9UnyGETqpoHQK3KeIavfIWl4 9YPcazP8UiGKiSIlzqjS8681IcnYtdTPuvjZAZZJ3KFfvPG7nRtG+DC2mtYOYFNB oLw7jzfsWkI/0Hx0n1gAVQxjdK6QNCK4p9qWH+I3Eqx42kgzu9lJvG5kEpJb8Ujx EokJ0IG8xD1fjxoWExkCdCsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 395160042726400530055115416992287901911094 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 10:30:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-03 10:30:30 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buongiorno.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 779706852887003671105929233563044107949153161288526339255553452319185302907433169868803697881204687166893834314174548769971208485084339184888142539900225384086069553802674444681128434440207384827593363964250157872002162400515333676460710130880729246248637828886272933468571024029724223964761352033390687377660522721474222294899321582012221212752071661270063282798644234695357930851968331965364490742468744266767599765680998410519240239151053026333046399582028093813601874381745876804558027532187443649279284304968689584523341987884379921322278495723105851520014070096704923010890278848380934774013740448540545004229798181438404466012703430135750975386315617523991314694961448429367931992022470463902523408369500314660179055272071733116389894882073663891329152006365932031511239637489407091153818861406164652461921544541089767664097946014622085725154056285634781329651614937696356676382112127678392406955994780435938119565747509914092700264876723860495015656726020231045866184706214914090276786952503225917708373251043108176369203748784811230666678741452628913364125253878519451215568727750741345412521049393838283169073199836570078844488926146336512754707285454406288155428428591238864165498567048351713017405186139299036540048667691 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca3f5e2b70241a6ed2474131ae31eb9b33ab2fe2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buongiorno.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001700ad0f1470000040300473045022100c488782806de57beee47a9d4bbd5b39855fc3fa5f09fc9c076367782341145f302202495d614233a0db31581d26b73f20fb2680b5fcc771b5588d7c9dc84aa755dfb007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001700ad0f142000004030046304402204c2768932cd8540ac8c3549ced2019c1a57f4b95819f660fb7e3b4b29e298e7302200a086663e5219e41d1dfbda1489338bf71645362cbab15a98d785e902d076546 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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