www.gonnascozzese.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:0d:bd:82:c0:b1:32:1e:5f:7b:52:ee:4a:62:4f:98:74:5a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.gonnascozzese.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:0d:bd:82:c0:b1:32:1e:5f:7b:52:ee:4a:62:4f:98:74:5aSerial Number (int): 353124717495069684874400902439124665398362
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 2c:5c:2c:de:9c:d3:fb:c2:79:3f:2c:4c:5c:62:57:62:30:fc:d9:71
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): a6:37:b1:ba:c9:b9:da:c5:94:a8:ed:b9:5f:03:0f:c9:fe:44:c4:cb
Fingerprint (sha256): 83:4f:aa:fd:06:89:56:07:a4:66:f1:d3:cf:32:5a:02:e1:5b:64:dd:cc:3a:41:c2:b0:d2:73:c3:e5:96:a4:97
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.gonnascozzese.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.gonnascozzese.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.gonnascozzese.com
Other certificates including the domain name gonnascozzese.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.gonnascozzese.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgISBA29gsCxMh5fe1LuSmJPmHRaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDQwNTU4NTJaFw0y MDAzMDMwNTU4NTJaMCAxHjAcBgNVBAMTFXd3dy5nb25uYXNjb3p6ZXNlLmNvbTCC AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAM+TDGemrJ5rHunK8Qzi7nPA H4guz6zQTNay+nXwn46erYH7Gfcw22Z3RPXMBsVOXoybKmTGvoyMGc6bGKC3cfg0 iDX1znnx0yp2yPmXNpnEAaEIMPQreI7COJDx/S/DfRnQg7oPmrLJLrBzg6C1uGgH qg19C6Waqg8m1jB0/dcDLJYKivz03K1W0c/zUfriUh25PFluugT2AZUkm/sg2L7O mvCQ71Q7TzVRKR/CJWi3tZgWrvSz1A69b6ZcMamoRPyvh6r1aILCGOHYZfvEos0U 0S6Ro0lQP99uCnp/7VKsu7E3bpp1m2H3cbMrgCYm3/O4pyh5h4Ntmb6pKTO+/EIf TYB9c41mcMqhuHgGmTMGH5VVtv5c1SwAJgBAS8AOUH9TefgTppMgc5MUwkozr5op qsAsKeI75HTe4XW84PbFvJtHIQObg/6WgfUaYMlvxc589OwJsyUPDUfH0dnBfEqR FZD9JLHML/KXyKkLVJ2os3lxmQS9gFV6ElP+ZPxBlCyL4gf57rmmgViAHsGIipnN 2fCOmeYDOgcEZ3YKsB2Rg9LpMpAeEZ1kpnQLkUgI3kvZWW4Xr3MDW4K0TGiytnab g4228+y98TVQtvDm3EHiFLS3BkzncD895KoFxfEgmKL+JYglj41YQ6gtxfBauTl+ lEPNd9Z2D3pkv2mkqSfZAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O BBYEFCxcLN6c0/vCeT8sTFxiV2Iw/NlxMB8GA1UdIwQYMBaAFKhKamMEfd265tE5 t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVd3d3Lmdvbm5h c2Nvenplc2UuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK KwYBBAHWeQIEAgSB9gSB8wDxAHYAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklT Le+LkF4AAAFuz7RX8QAABAMARzBFAiEAxw5e7OPdK6Mj6WouUehCAGrclpwXMy/i p6cZRurxtZcCIFr812AHnxPQ+q4RPryJCSR44ZFOSXB5DTiF3eLDiaeBAHcAb1N2 rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFuz7RYJAAABAMASDBGAiEA s741qnzDBDa2NXYNrPEd0mM8Awl/3JTUAe0KMwTYWzUCIQCz2aVmH7RLj13rbj2w CXN7SN+NfaKcWHnWmgGQSdtOVzANBgkqhkiG9w0BAQsFAAOCAQEAJ3A0V8uGKs/V Biohr7WwXaKmKyKlHvt0Q6je+YDhGG7MLjaRQTnahG03NqukZ0SQx7u37Wa8Bnb+ dtY0ws53RAvZcueytNKFucopHhX8g/7hUYnDebTm1shSc0ypwK4pu4qdzoSoMHAQ cyjD83FJSccJn/yO+j1fo89oVKQ5zAjGRsWW83pQUByZsLttfi/2MRkIIdrQ2diH 3jTAKYNeoxxyAYRXVbipVId0tiL6uLyfHGi/xzMoEedPElZV34Ja27TtjB1azgbt B/hu8qkFs8+COnR1y71U021iVdLRJa0Fa9E8AVmvGYVAqumoXosrzm/gF7hcgk/T DcCmKu8ruQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz5MMZ6asnmse6crxDOLu c8AfiC7PrNBM1rL6dfCfjp6tgfsZ9zDbZndE9cwGxU5ejJsqZMa+jIwZzpsYoLdx +DSINfXOefHTKnbI+Zc2mcQBoQgw9Ct4jsI4kPH9L8N9GdCDug+asskusHODoLW4 aAeqDX0LpZqqDybWMHT91wMslgqK/PTcrVbRz/NR+uJSHbk8WW66BPYBlSSb+yDY vs6a8JDvVDtPNVEpH8IlaLe1mBau9LPUDr1vplwxqahE/K+HqvVogsIY4dhl+8Si zRTRLpGjSVA/324Ken/tUqy7sTdumnWbYfdxsyuAJibf87inKHmHg22ZvqkpM778 Qh9NgH1zjWZwyqG4eAaZMwYflVW2/lzVLAAmAEBLwA5Qf1N5+BOmkyBzkxTCSjOv mimqwCwp4jvkdN7hdbzg9sW8m0chA5uD/paB9RpgyW/Fznz07AmzJQ8NR8fR2cF8 SpEVkP0kscwv8pfIqQtUnaizeXGZBL2AVXoSU/5k/EGULIviB/nuuaaBWIAewYiK mc3Z8I6Z5gM6BwRndgqwHZGD0ukykB4RnWSmdAuRSAjeS9lZbhevcwNbgrRMaLK2 dpuDjbbz7L3xNVC28ObcQeIUtLcGTOdwPz3kqgXF8SCYov4liCWPjVhDqC3F8Fq5 OX6UQ8131nYPemS/aaSpJ9kCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 353124717495069684874400902439124665398362 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 05:58:52 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 05:58:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gonnascozzese.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846829702406878148880792506139533176742434049235303661568815899791476669159397809147633104363378875722134150285870952728318357103778040472546510790028160976787697059580137166218975469047217641246722696377415666134390200103236985283867753571731057822245812602281657590560749826565428743635280018490104548182403422548111425383371401101025497160644091679362733622489754709884345770004645906418985999890647652207800065905891984878026407041164334954424196695711745430168073779505762676420393196580456695417126899511367740489919005229279514889069744714783439553927743101069340599106612898913555946363478676588511432779007290581767204256160478717999327080868668340608171944355661070924710909645258947539738079270935746346107374171824898033612637007735173316861774182171706901168279715678265733510948493759773884017441648152998466208536363204195225707663307801651737738195480123503395475125887779854850275576835943204684216988839170045856310503668227606824846853129564073468562213815226846061384924325000111974443554483235677570698808155702711511274919208405124942298569823743769318205423869085551723646029721250065477368039579206472820864150331270121430419410768986400995836731319183141164416652722973023039484475701196403965664844738799577 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c5c2cde9cd3fbc2793f2c4c5c62576230fcd971 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonnascozzese.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ecfb457f10000040300473045022100c70e5eece3dd2ba323e96a2e51e842006adc969c17332fe2a7a71946eaf1b59702205afcd760079f13d0faae113ebc89092478e1914e4970790d3885dde2c389a7810077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ecfb458240000040300483046022100b3be35aa7cc30436b635760dacf11dd2633c03097fdc94d401ed0a3304d85b35022100b3d9a5661fb44b8f5deb6e3db009737b48df8d7da29c5879d69a019049db4e57 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0027703457cb862acfd5062a21afb5b05da2a62b22a51efb7443a8def980e1186ecc2e36914139da846d3736aba4674490c7bbb7ed66bc0676fe76d634c2ce77440bd972e7b2b4d285b9ca291e15fc83fee15189c379b4e6d6c852734ca9c0ae29bb8a9dce84a83070107328c3f3714949c7099ffc8efa3d5fa3cf6854a439cc08c646c596f37a50501c99b0bb6d7e2ff631190821dad0d9d887de34c029835ea31c7201845755b8a9548774b622fab8bc9f1c68bfc7332811e74f125655df825adbb4ed8c1d5ace06ed07f86ef2a905b3cf823a7475cbbd54d36d6255d2d125ad056bd13c0159af198540aae9a85e8b2bce6fe017b85c824fd30dc0a62aef2bb9