www.w2.studio

Issued by R3

About this certificate

This digital certificate with serial number 03:4c:0f:e8:1b:b5:d5:f6:8c:3f:6c:4f:d9:11:cb:2b:31:7f was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.w2.studio

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:0f:e8:1b:b5:d5:f6:8c:3f:6c:4f:d9:11:cb:2b:31:7f
Serial Number (int): 287219461276111592060013320276631284822399
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:99:01:d2:bc:ef:fb:60:92:cc:3c:45:3e:36:71:31:3f:61:b3:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a5:e4:4c:88:6f:36:b6:3b:6a:42:8b:ea:d2:63:6b:63:11:5b:9d:9f
Fingerprint (sha256): 92:ce:77:b9:db:c6:ff:58:69:55:d2:58:a7:47:4c:4c:5a:82:5c:54:38:9a:9f:b4:3d:dc:49:8e:45:18:f3:ab

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.w2.studio

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.w2.studio

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alghero.co
ascensionarchives.info
attico.co
calogero.co
elbow.info
filomeno.co
giosue.co
gpg.info
japheth.co
readyset.pro
sanvitolocapo.co
socialassault.com
w2.studio
washingtontherapy.co
www.alghero.co
www.ascensionarchives.info
www.attico.co
www.calogero.co
www.elbow.info
www.filomeno.co
www.giosue.co
www.gpg.info
www.japheth.co
www.readyset.pro
www.sanvitolocapo.co
www.socialassault.com
www.w2.studio
www.washingtontherapy.co
www.zopiclone-store.to
zopiclone-store.to

Other certificates including the domain name w2.studio

(limited to 100 certificates)
www.w2.studio

Certificate

The complete raw certificate details for www.w2.studio in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UTvb+N6bmviDD9WUpKR
CzxyY4M4frWu0bcJHfim+IHTPbOS/qlYhT+dUq8XUc+yNeBKg1AcA9g9euoQRjIt
gQZJiESkFWiOk+renq+P1uUCRwC3+0O+HxYG+D3d+Q3ScFR+lgv03nEdwZ8JYGvr
jMmR6JHLbuagmVfomD+GP3u3Ps2OQszve3nh1op4guLNKUO1xnX2PBqYK3zLiE3/
V6mtg/UmrFRa2pYymccWa7hfh8xtY7bHqEgMGjA/U37PWhEk2hx+7ZanoqELspGC
2n+u8l1Zf6TFOyOnHFywX4PVj6ZpJSh0L7mQNhnugnGmKSJVoUZTGToIw8dTyfl0
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287219461276111592060013320276631284822399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-15 08:10:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 08:10:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.w2.studio'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26922752221656817930996026866643326694319479619475064462472984923253475574172833530496421484435480464749956831712468481246557178244270972739357264322472363598536388459176447264973372652380207406668269133513348371021229045408377576918395041932247763900867961111465818488359975787057531263111872661296001798008821634835852015682884662119541095758835337766327701155461408560087209323664037055497494657461266664618100709167073318941963417181949992082196268803223499102735818888969959975591576317487471210635114747737972316608281577611852741284648328372756600918380204212547936903395545182974501100227533530872678566163669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d99901d2bceffb6092cc3c453e3671313f61b3c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (508 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alghero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ascensionarchives.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attico.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calogero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elbow.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filomeno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giosue.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'japheth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'readyset.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanvitolocapo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socialassault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w2.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washingtontherapy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alghero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ascensionarchives.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.attico.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.calogero.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elbow.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filomeno.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giosue.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gpg.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japheth.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.readyset.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanvitolocapo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.socialassault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.w2.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.washingtontherapy.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zopiclone-store.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zopiclone-store.to'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018958d0c9ca0000040300483046022100b1431054c47244c0f659143d0b3f7809bc16ecbb4562f26b419cd0f79df116c7022100b208f1e4440ea4d6b42ef052c206eede67216b229ccc46453335e5f13eee082d007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018958d0c9c10000040300473045022005a3008bb46f127eec5439b2d3b47dbcb9650e9fdd6f71bf90cc0f22731839d9022100e9c99e55c0ee8c10fc56b246ac2b1f389ee449f53170f70e55790971cdcb5ca6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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