borgia.io

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d3:ac:ee:35:f6:7a:eb:f0:0a:95:fb:44:fb:0b:08:45:2e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=borgia.io

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d3:ac:ee:35:f6:7a:eb:f0:0a:95:fb:44:fb:0b:08:45:2e
Serial Number (int): 333366301292021971924135389438680026858798
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3b:07:f2:4c:99:7f:c6:fc:e9:09:eb:18:e6:07:b2:82:62:3b:76:ae
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 20:28:e5:56:5c:d7:d2:66:e8:ae:dd:93:72:38:48:e8:9a:a9:98:08
Fingerprint (sha256): a6:91:26:72:ae:07:f0:02:d1:9b:06:51:69:c9:43:74:f1:7e:ea:2e:ce:55:20:71:1f:f8:c3:d1:7f:0f:9b:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate borgia.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for borgia.io

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

borgia.io
www.borgia.io

Other certificates including the domain name borgia.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for borgia.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333366301292021971924135389438680026858798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-10 18:45:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-08 18:45:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'borgia.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 809442056944691016971180267431124768649895677065535717475371478550323226067422881832311408185097489721833498778328071550256886932891310889712042829607182066361232492165674121889560974110107678278440648621808693473584971672496530844094460611132854052704024064693822787965210100973297545340995240981290948679557942026990590380462254000162381428157273762212016711407755024653411410270873986693593691771380949914098479551957863655146428307013635550282162890402549569166620824265136895542982105120666079412582181874252081504475356875605752003562256381563537638418754851070445138331442761899152412402256300915820736709116737920098927443569144743994323628836697037315353026810589655791697744164318698110824896500154015815671301425846700143769365811379524838890215019981917179706218329243573359828021999700972070031980907373220965352126801444851911223683501306645362116024832446457897548019464403212246400556454316162987688149831311606677399587207880694219715971070000292813018252706930016827781053580490570754843662021851528843356229233231823035145159913339969357895715868128435753224911433012774646617527000228625843820296099249132803488472191761134352309660159911159221579970986809599592082503387578976901604052771205666318524517076904063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3b07f24c997fc6fce909eb18e607b282623b76ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'borgia.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.borgia.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166ff2827df0000040300473045022100c9f8cc1c657b33a6e832da0ede2404b353b5c0f6a0b6570dcc056fd63711213c022068e0716603e1784a1d351e15cd1d769379710896bbe9381ee68a9312130014c0007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000166ff2828eb000004030046304402200129b08b10f3ee9f14a9d9109e2ee1a34e9be0799cdb5aa89eee44f274fc5543022001991e7bfc881015ed7fd2d1e4e4c3ff9373b47924bd4c272fbca06c4d07c2cb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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