maurizio.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f3:85:37:ac:97:33:e2:79:21:02:12:73:4e:9d:74:5f:10 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=maurizio.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f3:85:37:ac:97:33:e2:79:21:02:12:73:4e:9d:74:5f:10
Serial Number (int): 344202549357389361680580089320262488842000
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 54:40:7f:c6:a1:cd:5e:7a:c4:6b:88:bb:dc:8d:62:9e:72:33:c3:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:5d:94:9b:5b:62:ca:7b:f6:31:9b:22:bf:c5:f9:60:29:8c:0c:67
Fingerprint (sha256): ab:57:97:aa:69:5c:78:10:87:88:d9:17:f9:40:f6:23:74:66:0f:bd:fb:fe:a4:e4:95:5e:9d:89:a4:e2:d5:eb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate maurizio.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maurizio.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maurizio.co

Other certificates including the domain name maurizio.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for maurizio.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgISA/OFN6yXM+J5IQISc06ddF8QMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMTQ4MjJaFw0x
OTEwMjYyMTQ4MjJaMBYxFDASBgNVBAMTC21hdXJpemlvLmNvMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEAnC2kUSa8gXIOIjnQ1cRXVTMB0rppBU6Grknm
TmVAKuPKAytMH+8wdeqLo3P56QriT05nZsnCfQ4956nUilvfRtMddi26c1E+E9tY
DppeagN9wNSzD4pocP6eiZDwRgImRHEcS4ZDUTLYmZ39+YTh2JEexa8BREDiU4p2
aGa5ZmpEwZUE/pRuneVNiHdlqAxJp2JOblKmQEs7gHkhEoruucKGns+WQsimQ8Dh
eJYIkGJECP1O2KBGSA3juN7iH5YhWj8BuoAg8UGILeT5u5olHn5ryd3dTjJNvAv8
m04OWxmZIhbjsJbRQSientlRloq2fgcseCD0gFXlhDR/N+Omorey8cmq0leonbGC
qFK9df+gkfbhQeKMatB8vl34AC4D/4SnqLAU3GG+81DqAG0VAK6lpdRdzLoh/uTj
N7LhWeQ+Nq6lG78Rv2ia9CDcIRzboGD99HfBA+dveDzvBdxyr/j8ucMXd2OXJQu0
ETuM9nWDC1p4ynoeY6FBWBH+LsaMwNr2rFoXFjKOtQVXJEes1pq8Lr0QkQxaxRcp
0fxJJK0eVXfVb1SVXQGext1D5jd7Rp0s55uwqKWaskhHrG7dM+Hd1fyuIq6nWZhl
2JUrcWmaRx6IZp/45v/U3wDuWS1f+kRbIYcIPwhgxAYC5F0v3npIwHYIwAyc4R80
2oEryFkCAwEAAaOCAl8wggJbMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVEB/xqHN
XnrEa4i73I1innIzw14wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggttYXVyaXppby5jbzBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2
AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbDrFRvwAAAQDAEcw
RQIhAK4tAeX8YizU2fkdJn30rsjRlux22CE81CKo0vjyLyViAiAWy1BG020AnIWx
/r+BW8eI5eGepl8di34ji/e49OixGwB1ACk8UZZUyDlluqpQ/FgH1Ldvv1h6KXLc
pMMM9OVFR/R4AAABbDrFRQIAAAQDAEYwRAIgdaPNFghO/jS2LrKp9BIMqJh42F10
OT4ngaf4yj7AKNcCIGcnjdNP2PbUYp+esWIKpo4tFL42DaTXKaJTomTV6AaeMA0G
CSqGSIb3DQEBCwUAA4IBAQBwvGaDA8shSwtjuFS40iIVMbFPJdrFzfyYfhB5K/uE
LeDCm4qnS32H9uzk5/x3L/GJvaOK2LRBJKuYkxv2os4ZQZbP4dqeUr6Jw1nRrMhf
lGmA80DOuR7BVEBaPawoYdCVvwccCzho2ODXQ5hGile9Cjg3t/zLaIVI/VbRqTlg
AB4Y8Y69llRkKY0WPOVgFT16iLRML91GpyrYgW+niFQegx/7Jqf0rJeCMWjKJZKL
s4ltNr3eFWaDBPUW+QpapO15AQr1XSPUEE3IHe7JPvbo7XfadNzEqVr4B0XsIRlv
PgE1DVjHXC+DWpFskMLyIjkjOttY8sn7oL7BXd1zDiE1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344202549357389361680580089320262488842000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 21:48:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 21:48:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maurizio.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 637151828348428969678495651197017915425263494431275317700490610181629336324657838146639317024287212075366570562909297456468610315853842688128612173222948670174956770119234804534708395367276177348110304507501606264427004874675462430359313107582550012693230430349838678248343368848083697031267334963453507607883417229089904309016425831864562903418065581620074310043431255115639673258901809846523557991678444922949069135993906257098532513939637577916386156487412821854161174035127921576187974851221008630598934226522522392234116535928630350342223705690082064887124083391429788503972522980238195210731368140414113516834131375876223569123429709078447322088228709654427113668759789229044505150744371451853833329851242114074869340669855238257334606118562255249264271833660318612428256986595849023116030237483434699327083020680371089958755534021252778425189049111551147331981976186530108276501167691748187978722671718078666357765726862305817059649810579618157296697318674785297204568478825419860374245742922722698192859031997179485740786849302423930038450443017972675574497411903851183996604515731258225490918673144290591116731479088252353858545722777220469373440385465663255161303652375783528588579435325538682036005678718474085053479241817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							54407fc6a1cd5e7ac46b88bbdc8d629e7233c35e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maurizio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3ac546fc0000040300473045022100ae2d01e5fc622cd4d9f91d267df4aec8d196ec76d8213cd422a8d2f8f22f2562022016cb5046d36d009c85b1febf815bc788e5e19ea65f1d8b7e238bf7b8f4e8b11b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3ac545020000040300463044022075a3cd16084efe34b62eb2a9f4120ca89878d85d74393e2781a7f8ca3ec028d7022067278dd34fd8f6d4629f9eb1620aa68e2d14be360da4d729a253a264d5e8069e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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