lucrezia.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7a:8b:d9:f2:76:73:4e:47:e4:80:31:45:f7:25:3d:2a:6d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lucrezia.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7a:8b:d9:f2:76:73:4e:47:e4:80:31:45:f7:25:3d:2a:6d
Serial Number (int): 303037200897195370518566355142397176654445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6c:cd:ca:dd:e8:f7:b9:7d:71:20:c5:66:00:5f:6e:77:6a:a2:42:5f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:67:76:4c:9e:0a:37:71:3e:af:b5:5a:1e:4c:25:23:21:60:ba:d6
Fingerprint (sha256): 9a:06:07:b4:36:e4:c3:98:a0:47:52:1a:6d:27:fc:11:7e:a5:37:d3:6f:ec:50:ff:01:73:4f:9f:00:10:6b:3b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lucrezia.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucrezia.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lucrezia.co

Other certificates including the domain name lucrezia.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for lucrezia.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 303037200897195370518566355142397176654445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:01:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:01:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucrezia.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 750508235404895464024457936257100018243749118870750768762689706107260931799063436864926712873631493267311661503108236015772151606739667252864795202349214319716759045894195941455139966933592445518554767184052734369849197218440527394353293019549249808082886063240717312069188573115589476705644074731125633754143580005192858381926472929782389508662821218271643988151906185493298376851428935983263445426296263863378221656776631835876240688868189869188785744337063584470439553704224223692052470849892777813969021699176282124641940750509873506287831896543558792930249903293564905426692255740444153428648616707298972036197840572943001210415344893792612979986640630150887817251339799014044708415670417746054370266278207177709295200297648314572552587630711621776842318284806161642403974821299135195328156289303156572679286975442502666978642275401865957780684794495504705881576237747415456822262227137256688950501908567371837125345387681779593841152183594628994793723429986864072720556696057731760959145273121712865883401649755448454412197458874872188042702180558963732263326282393364720399138632650076556373323797899684390642232053921432514260512890745772012987228996352035499809612336118097722325040183290225968042721181526571054068034562227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ccdcadde8f7b97d7120c566005f6e776aa2425f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucrezia.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff9a79240000040300483046022100a055caf3dbb532691def2fde14c90a47327c94682f0a4ce793ea49a628792a5d022100eba8724903815cd69cac580e9370f46b45e29638c82cc6b109647baeca5d8e50007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016aff9a79130000040300473045022100fda6751a60180bf9ca93bd651e9fbdb719dae6729b29db3077bbc3576df96216022005faa5eb4e538e1ccf89d9e1c2b4dd4a8324303043a5acb35df092060302b711
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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