www.latiano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:48:40:8c:1e:d6:3a:50:29:01:16:ac:8a:2c:92:29:93:81 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.latiano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:40:8c:1e:d6:3a:50:29:01:16:ac:8a:2c:92:29:93:81
Serial Number (int): 373035272284084147373467402188735977722753
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:80:33:73:37:cf:78:34:78:f0:9b:14:a3:91:19:70:11:7c:1b:ec
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:c7:f0:58:80:11:55:77:73:cb:13:94:f4:9b:94:97:29:63:a0:f4
Fingerprint (sha256): 85:e5:d0:b9:a3:cb:8f:5b:fe:fd:2b:38:d0:81:90:e8:58:91:45:04:9f:94:63:d6:bd:1c:39:8b:35:52:2e:10

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.latiano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.latiano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.latiano.org

Other certificates including the domain name latiano.org

(limited to 100 certificates)
latiano.org
athenawisdom.me
www.latiano.org
www.latiano.org
www.latiano.org
latiano.org
latiano.org
www.latiano.org
latiano.org
www.latiano.org
latiano.org
latiano.org
latiano.org
www.mortgagefox.com

Certificate

The complete raw certificate details for www.latiano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373035272284084147373467402188735977722753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 03:57:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 03:57:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.latiano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 738555971409596039715374171931109273669327677002458996593220959382982005138362330701828212725464169087159819196217103038401525679916881183797335855450202597852508042896667983328521827406697359681824749708163101648306562332230748602830763789472516064375550472178958258663265214591831837627464052965323300131260925951098779201120028672228540643034307857007862290772256325035323691037262914094346979462857626179735058440807648891079823183280962363023277980142184485912084903184968342583256368237554864073610606691795347232046480526742189221667813823374460047817350655133494181321151275807314372633444328331740995054349942750118539550480662821781942146238153217268562533280975428993848979222790204058105149653534865824311137436310114973223669089279762264712846712853788047489181132110819046053644721674155117462970626469532072326831247423343128205994581747579399297094890200416496389127334893275479421185780416632286499705805145031663830979505192236882465184131018582641742347842875493366281616524813539211545775179849363457920095404273776780333144264292971885276765330050085481884479422484182238476199174006408107652343097446435218448513920207285658574572309378263329346109276397062605542060912460717844870429891325588760415772713678639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c280337337cf783478f09b14a3911970117c1bec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.latiano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7b61472f0000040300473045022100cec9f24b74a076f4542281c7d334fa4488f1cda7e010a5da4e07310fdee4132502207d34b6df781a480a4c78b03e4d2e9ecdc90ca126e2e69aa47247529424fcb79a00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7b61471b000004030047304502204a27e08d5e1416a651836955dfacc80b0ce9efbdcfe05b3d61add7907bc16dec022100daf2b9db7d8123cf2162500846e2113e6e6d963bfc75e61f2a92385821dfc2e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002b47e99237354aa73ff7cbed0d27d2b90cd7daeafe6bd24d5b8e5ffaeeb3c9c141dab35a373d0be80e1941efd778393e989dcd48d94b60011ee47880708546e1e3dca77d250b189cc397cb7193846d033cd7ad6ab80424a0b75c0b592e72e35a6331b32aab8aa2bfd230d34586bf3748de1b380ee6da57e876176407c576c5debb266144b4a90dc95558035a3a7c4e31961be346f9cb4e200a15bf3a933e8f21a638cd959d027b3b2dc6f31652ea79e2d4b7620faaa9a54b3038fc91258d68f1a4e75e6f8b36bb670e1b95c9f3766bbc0ca4e2293dfd097db572c55e667ec7cebbb7fce35e94a5854d469329e7153654a8c8bc1b696a88533f5ef68c5e9538e5