www.rosaria.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a0:8f:66:5d:9f:ec:3a:5f:c4:8f:54:99:ff:49:f5:e5:9c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rosaria.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a0:8f:66:5d:9f:ec:3a:5f:c4:8f:54:99:ff:49:f5:e5:9c
Serial Number (int): 315972647619242187627894450166336180315548
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:50:fe:3c:22:9b:e9:a2:fe:7a:a9:62:a7:51:a0:80:30:ae:6a:e2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e2:5c:e5:03:06:f8:fc:52:15:05:ee:00:3d:8c:e3:43:9d:95:24:05
Fingerprint (sha256): a1:76:a4:98:07:66:6b:cd:ce:a0:27:c5:83:8b:90:cc:79:e3:c6:24:71:10:70:b0:71:f1:75:1d:2d:bd:2f:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rosaria.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rosaria.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.rosaria.co

Other certificates including the domain name rosaria.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.rosaria.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315972647619242187627894450166336180315548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 21:01:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 21:01:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rosaria.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 718825603352288141925662245871263930666478881638457216916273531027905921909663596808026697549672073707285666201347591101124366391123461363123694239705018756419373326198457102052670665924449207465723335583227225251034505429624460754900857407505891791824781915580540913602025601960294967024256587328414874584412106099580307216820704487142949021958172707551919439356307418874729741792231603616504859498856084178458211703658410860301779857718426765824632153241715002483561800880816192748143027564650499440025831220715417162661430867654473822327094563626815707072387218267898061389377521261654174294667120974842184300156609204446997933450256542624935141411739687272217805653387744270662846057007165948891152293572344995042576619328561519264839698087194553408419568167745396396909365055570485478739165094450711166189413847342743373568799400979261247527003434118562607187866546961331467804313978075576653574559361879237953545229135189283998155209043363270216477442394958889600993409719453744255480472577547740825421054624847189886946360789384723627893302869223780351476599581255360143962316729243504043734292017471937770582434358573986944255784426807720093423354441206719712083767480288506530721288549904316690235515152223583105655343306553
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b50fe3c229be9a2fe7aa962a751a08030ae6ae2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosaria.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3a99eefb0000040300473045022100fb801888a3ee41308a48bf8844bb13b1c284c48b301568a4e83e03c9b95690f502200762a87a76fb1c62211b09877c19d5f5d0791ca2cba31beca83e9364f5c6d56900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3a99ecf80000040300483046022100e028084d1b289c62cb2a184bcaa8ef767b9379d5dfbd8ea79696a8c3fc16cf1e022100c91bdb9f611b700c631af1c18e2db4da7446b62f016a0437d24b542769c3c6f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0039642f9824b4e1cecaa244fc8d476afc294bdd8ec55516f870e676ba12311bbb926d85664d3d884a23a98436b06c3ca2881c33c710d69508002c56f6755a9e25e7ccf1fb103e9196c269779cd622e082c7cda0ac32d1cb690bdf463dbb015cce23b445f06386d77deae92afc3f72a50f983a7e6f774732d7871fa9e4f5f054c929566cc3b15d34ec208977a149b4a9267dbdfe90c5c5278ad457c78702360dfbfdd120d60d96fa2749ca2fabf8afc2cdd64b4a33ea2b8ece40e583356b9726374b962c20a229cdac887f30bbb48331965241aa24b17f1a14f788c479a45c38469d61372772dc68c97b16d5974a9faa4fe8374f133e738d4a70e119f75713b0c7