ciaogirl.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:ba:e5:4e:07:3a:59:fd:bb:9c:14:1d:96:4b:f4:21:7b:d9 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ciaogirl.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:ba:e5:4e:07:3a:59:fd:bb:9c:14:1d:96:4b:f4:21:7b:d9Serial Number (int): 324934176399364957156966533297809156832217
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ac:79:10:ce:8c:e8:1c:d3:32:5d:bc:98:55:7f:d7:78:1e:d1:64:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): bc:3a:c0:3b:48:f5:9b:3a:4b:01:55:3f:d0:12:71:92:f5:96:1b:dd
Fingerprint (sha256): a1:4d:56:20:33:0c:8f:83:9c:8c:18:88:0b:df:4c:15:9c:f7:0f:f3:26:53:cd:ec:4e:56:34:03:96:f2:1c:58
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate ciaogirl.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ciaogirl.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ciaogirl.com
Other certificates including the domain name ciaogirl.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for ciaogirl.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgISA7rlTgc6Wf27nBQdlkv0IXvZMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDUxNzI3MzRaFw0y MDAyMDMxNzI3MzRaMBcxFTATBgNVBAMTDGNpYW9naXJsLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALYXH/o4NdUmafFiNz1vJgzzs8KpM2clJN2h iPH0eU0D5lngp9nKMBE/UuNNwQKM4G99xVYp/lqXLvWYsZYwSOhtz4xsgGH6PuyV q0h/awW9prA/rpiUgeVcWMyUjQ8P4iY7hhIDiEc7xTyJSJdIYkQJ0vj1ytbCpswE 1zTCL5BFU5xwYzritCOkz8NODgq4z9Zsk141DIfDNycm0vKVr9l+/y/xjVzMYXPa v7Smt4Cn82DlF0hnnd4IKAx3HJCaRvDYnigzyn7efO7vB4t5/EtDZDo7qOsrts3u eXavAS6XID9xLLcrH7j2fhHFtmxLjKqbYONEqMHqbhQxJvE9gMdvK5FbRdRF++ia EEC1WfWLc4wsszRpgMgyvBenHkMvHbycpv/oo3ha900WJMoo9CBasVzV8sCTCLko w8jj00nHGKT9ii9UWwLhsyTfhayWkVDc9kTW5x9PI4z8GwawGMQuSzqzxLcWIRfg ARhFGikKSIxLwE6EhSL5WR6f0FW7t/OstDq/aDeDWmoY1E1mMG7Me2nd3gpv4jDa 1TgfhsbS9GHybzBn59UGH2YAxsN3xbnGAUHYLHs2OVWYYqabkfzRR3IkAe4qDR5L r3oeFxKowJ4LKjZ5/SJ/V3UdZL2jht+Qf5JsZDQaQD66IEPrlb4Wl/TFGAc2JNcJ ooOCZ0tTAgMBAAGjggJhMIICXTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKx5EM6M 6BzTMl28mFV/13ge0WR4MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyh MG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgz LmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgz LmxldHNlbmNyeXB0Lm9yZy8wFwYDVR0RBBAwDoIMY2lhb2dpcmwuY29tMEwGA1Ud IARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0 dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw AHYA8JWkWfIA0YJAEC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFuPNJu3gAABAMA RzBFAiBD28vAqFbnQEG+U13D9q73Y7dwOkARsR3Y5BWZm2/ZBAIhAJWs+o57HhVM 1lSVQUItwi+ggHemofdusnI53a7wy7BqAHYAsh4FzIuizYogTodm+Su5iiUgZ2va +nDnsklTLe+LkF4AAAFuPNJu7gAABAMARzBFAiEAuIHQkVRM7Zv0HpQpjHkLUqix ETd2GnE1OZ9fUE+GeCUCIHpVhxv4Ev9ndulZNWfZvutcY9bMkY+tzLdCmlveumJG MA0GCSqGSIb3DQEBCwUAA4IBAQAGDiVMcn0aIlqkBjaafrEetV52yGR0rLeYV2Gj RLtVH005hf2p3aVZLrKA9/ivEr3OI8ilV1bE5yu6VXuFhHY1NeJku934EI8bYzwA 7BIDWZe3I8eDqNIKG0OOIb2Uif+ylZnLzk99ME53LFrZ/ucUvJGrdQP1G39xBZA9 tBArEX8dFKxO9cebTao3R7VENy+E8MGjeLGgSrjJw2O4iktVlagPMxti/ZDDHSVD AgATpydQU+eq57jv7IOUrWzdymJV4EB3b0RHoTzZpIzS9O2oJiRVOY6YmlpeLU2k 2QzkLy/OQFMXCjGQs1X7j1TZo+112h+hQ++m4Eyx3LHgl5P2 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthcf+jg11SZp8WI3PW8m DPOzwqkzZyUk3aGI8fR5TQPmWeCn2cowET9S403BAozgb33FVin+Wpcu9ZixljBI 6G3PjGyAYfo+7JWrSH9rBb2msD+umJSB5VxYzJSNDw/iJjuGEgOIRzvFPIlIl0hi RAnS+PXK1sKmzATXNMIvkEVTnHBjOuK0I6TPw04OCrjP1myTXjUMh8M3JybS8pWv 2X7/L/GNXMxhc9q/tKa3gKfzYOUXSGed3ggoDHcckJpG8NieKDPKft587u8Hi3n8 S0NkOjuo6yu2ze55dq8BLpcgP3EstysfuPZ+EcW2bEuMqptg40SowepuFDEm8T2A x28rkVtF1EX76JoQQLVZ9YtzjCyzNGmAyDK8F6ceQy8dvJym/+ijeFr3TRYkyij0 IFqxXNXywJMIuSjDyOPTSccYpP2KL1RbAuGzJN+FrJaRUNz2RNbnH08jjPwbBrAY xC5LOrPEtxYhF+ABGEUaKQpIjEvAToSFIvlZHp/QVbu386y0Or9oN4NaahjUTWYw bsx7ad3eCm/iMNrVOB+GxtL0YfJvMGfn1QYfZgDGw3fFucYBQdgsezY5VZhippuR /NFHciQB7ioNHkuveh4XEqjAngsqNnn9In9XdR1kvaOG35B/kmxkNBpAProgQ+uV vhaX9MUYBzYk1wmig4JnS1MCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 324934176399364957156966533297809156832217 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 17:27:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 17:27:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ciaogirl.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742863741509502214526128802689050276693121724117092478297496245155649312655329476242877655606227620202927760136863315439334221278841235425279744627498348141549788693707392556470184749482550277739206824829543537980565422020914982768521273453285245323003142747668564521490713471672730913041198620229325452387839605878988953050251971905643661113349055548671454063546153017367641442276196474011498509583281229222808421420681086845846805475803576390394932949248336065723376742733599046168301686028205646114364449992970949870927187539869882893738181714422488626750896599784293096297934077471750558388429697270988345228727350097490959738437590556381845536298539343635981445370002888341480230780902781773044050830713958690283711017379984821540894411034662343499002301392725143385988892482372495227696820129896331731241663929111209248563776585220121120649635417061647180793092956583692162550794262499065818498042154479428545610038733179356673470666438299796505844272195397080236542327662959881463032962037688432961039630105242009793795727189153688821535066338892613372159867010399767814995078983630274260996837390434420988248250267480761373280619021275831594312459475075325063019270358913841271838340989560525568831562131255314494609313712979 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ac7910ce8ce81cd3325dbc98557fd7781ed16478 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciaogirl.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e3cd26ede0000040300473045022043dbcbc0a856e74041be535dc3f6aef763b7703a4011b11dd8e415999b6fd90402210095acfa8e7b1e154cd6549541422dc22fa08077a6a1f76eb27239ddaef0cbb06a007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e3cd26eee0000040300473045022100b881d091544ced9bf41e94298c790b52a8b11137761a7135399f5f504f86782502207a55871bf812ff6776e9593567d9beeb5c63d6cc918fadccb7429a5bdeba6246 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00060e254c727d1a225aa406369a7eb11eb55e76c86474acb7985761a344bb551f4d3985fda9dda5592eb280f7f8af12bdce23c8a55756c4e72bba557b8584763535e264bbddf8108f1b633c00ec12035997b723c783a8d20a1b438e21bd9489ffb29599cbce4f7d304e772c5ad9fee714bc91ab7503f51b7f7105903db4102b117f1d14ac4ef5c79b4daa3747b544372f84f0c1a378b1a04ab8c9c363b88a4b5595a80f331b62fd90c31d2543020013a7275053e7aae7b8efec8394ad6cddca6255e040776f4447a13cd9a48cd2f4eda8262455398e989a5a5e2d4da4d90ce42f2fce4053170a3190b355fb8f54d9a3ed75da1fa143efa6e04cb1dcb1e09793f6