rosalia.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6f:b6:5c:cb:69:e3:e9:5a:a9:2d:65:9d:39:6d:8b:b9:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=rosalia.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6f:b6:5c:cb:69:e3:e9:5a:a9:2d:65:9d:39:6d:8b:b9:33
Serial Number (int): 299350601835767391087682619071269241076019
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 86:37:9a:ac:59:86:b6:2f:54:ba:8d:ff:da:42:a3:07:7f:d9:37:91
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:3c:82:44:b7:dd:95:a3:57:1f:a4:be:fd:ef:e6:83:e2:60:32:7c
Fingerprint (sha256): 9c:57:a9:1e:63:89:b5:14:97:a8:27:fe:ef:69:a1:db:d7:28:d6:a1:84:99:e2:f2:41:75:12:80:3e:c7:67:90

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate rosalia.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rosalia.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rosalia.co

Other certificates including the domain name rosalia.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for rosalia.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgISA2+2XMtp4+laqS1lnTlti7kzMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNjQ1NDlaFw0x
OTA4MjYxNjQ1NDlaMBUxEzARBgNVBAMTCnJvc2FsaWEuY28wggIiMA0GCSqGSIb3
DQEBAQUAA4ICDwAwggIKAoICAQDKOuUuQ89Nudxau8xY4wmPnS76vsTTjM5nvajr
s8bOYjIYMPO9pXlMvJzM0AylMBmp6Q+Obm3QcKj5BTPvJbnaVQ2IfoI779EXfwzv
OPxLg0F8LLKLk/OMRY9bLWy8/7D/mfrp9OoXyxsp50bNsOz/R++rWDe4TVY1K+VC
keD0j9g6pfeO/Va9jFwQ4aeqfR3fu0G8A35HYObckrhx2bozKcVlHVrxd+LybXTg
Q5R3HxjS3PtRFImpu3SsuiMZ0XQVRwdx6YPfadwWiFYtSrB64osQmha+VoP89u7u
vzc0tGkQNkMA+xApgLpVranxP/iKqOglWHv7DtrKvWGgLhf8mle8dt5R5dtEOwtw
IOSJQknJnkWycSysHzryK8zHb3mza/ZDvS4mTBa2WmGf2Dnila8ZB5abBXIuOpuk
zpwArZzjvhfkM5qwKZ9Z6/01e5dkqibM5RAgGX+BcQR4UWM/hq3youzhTgRp5vdr
wqUc0L6a3zsaEW0NcvJTVXDMAf68JMNroc00Ltr3uj5IQxoCo9cUigjuw7lQHa+3
JV4LjB346gAwMuyEFRXBVyNp5sGnls3oXIlHjxEwQHR/mN8ww+aBcmJhtnq3V991
VKjxA4vLo+yI/5CbEwHnwEBaTSK5R+vi7QRSSqCwrb0vZcpZlcLNyAk7t6875lWq
PLI7GwIDAQABo4ICYTCCAl0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSGN5qsWYa2
L1S6jf/aQqMHf9k3kTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMBUGA1UdEQQOMAyCCnJvc2FsaWEuY28wTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwB0
ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWr/jFmZAAAEAwBIMEYC
IQDXfepjOuCp3EA+1iRNcdeiiEJDUmtFbEyohhzkcYh0aQIhAJ0Eye1hoL82m+Qh
hFxr4cPODzEA4JyuyjEMQ/Mbe4/nAHcAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm
OLHHaFRL2I0AAAFq/4xZtwAABAMASDBGAiEA/iocjM/IOulQH66h+IHaTLGglLm6
e7mCYkTBfXZrlGUCIQC/PEe/pxCj+8P+R7Ia7eKO4UGNE4sKom6KELHP7heoCzAN
BgkqhkiG9w0BAQsFAAOCAQEAdLM4hiVnneGKdPInftkVyYQytuUhFg8d306hgplY
cn5Is8mtcmx47pVXq7ytYPu8JQ6j/8kKVYpXje7GnqFcQbx7dHN9qTWjTJg94H0j
lwZpqT3YaTEN2sVxPuP3W3+AcpEQYt/I57sjKbR9oQ5SAmITwJjoCtGG/9JM3q0i
AS3b2gatM2l0xhOlaxP/qS/nQrxrQ3/QoGt2nLLaetgJHyq+J0+ek89v3ttvzG+D
LKwyjrVGSRtfO0Bi4gJaRVR/VSB1lgjMvzZKiHPtAUZ9134H8XNOrctlkQN94aZG
eT+vyy8jPUWOyK3f7JBxy+7Ew+uQL4WTEFRWbl66zIiwpA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299350601835767391087682619071269241076019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 16:45:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 16:45:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rosalia.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 825026662697337542487554703705296253917904821782851134368673100994206026231292197071878417116074955079358072379486823457042239818644711869194070371151373276754263855445248161507739011384716160380280054524707148147836435525177595955627520093401479637532873577908406484182779276228595164831109973074998502268314235267279072982050509327595415860665980181746785447680924557557225086366984500969384993133810970373182497496077322702582510613397751914133322861833467416851254848403367303099297273748818897432832299965068959726685177953230647047737082017676438190381964462171867275423209718027667380046320321134625854700712866400043681847824996626647442602361500238127696519108589596377425300040708285055748898292356314728384879524514863224943839888541825179910837719630847875330227803932791865118744763730709617394653038464222898648978802173157089081607153820054056753267977947645498901413341103798044463552611126177759902868382185263954531468420824263400537390708035012911852222382532926764726460147894647869103968650488456530575412976805102553835292578136408016986404090160904794097976424404751611571518706011100786453264909541174236121018335565498782130599872131245413439637327185290457948327656847956798721823125026965822466978273704731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86379aac5986b62f54ba8dffda42a3077fd93791
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosalia.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016aff8c59990000040300483046022100d77dea633ae0a9dc403ed6244d71d7a2884243526b456c4ca8861ce4718874690221009d04c9ed61a0bf369be421845c6be1c3ce0f3100e09caeca310c43f31b7b8fe700770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aff8c59b70000040300483046022100fe2a1c8ccfc83ae9501faea1f881da4cb1a094b9ba7bb9826244c17d766b9465022100bf3c47bfa710a3fbc3fe47b21aede28ee1418d138b0aa26e8a10b1cfee17a80b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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