www.fasciatoi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:f5:34:d3:7d:95:b4:50:c7:b5:ea:f6:dd:41:1d:f7:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fasciatoi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:f5:34:d3:7d:95:b4:50:c7:b5:ea:f6:dd:41:1d:f7:60
Serial Number (int): 275274087620060504617674541082336347158368
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e7:92:b1:4d:3a:db:51:cf:54:3b:0e:8e:df:7a:b7:23:40:5c:ac:6b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:10:8b:ae:03:a7:b3:c1:53:f1:af:54:4b:f8:e8:26:c5:e8:40:14
Fingerprint (sha256): b0:eb:1b:0f:15:f4:82:0b:a6:e7:b6:e6:b4:96:19:51:68:88:49:6c:54:48:d8:9a:95:7d:db:96:7f:45:01:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fasciatoi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fasciatoi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fasciatoi.com

Other certificates including the domain name fasciatoi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fasciatoi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAw/JLtuxSNaZxtwe4+bCB
3oTcWryHZNdK13DwIQeu84vmrw0PPjvAUJAYlTfFnDym+VhrBx//BTUyELERlmDq
thccVHtPT+4iwaBf/RvvNS6Ni/xuAsX0pDlb2Ko+BVVsX6ftAkRENiWL/Mg6I69O
/EhivgkypzOKXqPf4GyXr3a4QN9mu7r2Y4okNZ34lYKlzIKOAGu81AZ6GZdKXG3s
ICyubGHe3lvKFv031jGAro2tR49xk6tLBMMKotKzgrE4k8TtGJg+fYic0lBv8V8o
m7Q+ncSwNAy/8jGtv86C8k6isQtPDFwwTRDjJTGsZCWUAEV6POUEks6hJ6woGeix
yXC3C49iqoXaoFcoTtsnZPiWZYH+uENZQTA003dH1A6Kn9SSE4sknnPeeB+1aPr2
tcdH6/nmDdt0xx2NbLvi83+GqGHOxCH9+TGJdEZttc5jOjHIH555b63v5YE62sTm
r4cnyRnmj4kqtlMZmx4kTkQLmguuhOM2j89zEcdvmj2HjJrZXW3GUxoyBDhotoIF
mKXfC/jGeGvedS7xno8o8yOxG8q0pfKILlSfSvN43T2qwiQgMtO7/01Yt8oUmEWz
ka/pg3P4LBN0eC55uwcODMLQPlDEKNZeccMf8J17PKxDuF0alBavx/K2XKoqaIhJ
rM9H+93d1+MScqDrGAcm6AkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275274087620060504617674541082336347158368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 20:07:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-27 20:07:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fasciatoi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799391845059733639283305498757507912965795531813709578984121353922631554500318334849796345975029435138921157644087993027752326955870076792306179427871810552490159496202168745353296309669013249636505984209483309648457905600105904864262952247105589269949408873873330062423774510786934103240097073525167838305749902871477873511280300732137797148434499257250055145716073202778541992713092188608133116644533837225283139516124607475986070710642477680223284767830833760718934260072664777090225414853301805011929643744181023830176847632710416561371071189663506810618464852593625607398338171179713594444832690292868501083694006974196997458908697074604453099009877694448371680803969724448619722128173431054921014528543234429014800889172621695804177960913418485619961938111596005523859026861777941940206806176607276422587474603670957668670320404615951943909721136586837505060448646714239530108661362308759838125046206726698882218372493006705026155756311565340225466499531331906719975769521147628717475350170947624033178983603289807638480138223414941666072467297024008748446290599725415580420978585841775148200024046323364972180405940091226916882630368023257882839214640029791044342470740041051644483800324066437149024961198892627371208181475337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e792b14d3adb51cf543b0e8edf7ab723405cac6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasciatoi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d79b3a63d0000040300483046022100d806382244422153ef5ee123c62cc789621e7bd9ecac05f11c0f5d4eebcdfc7f022100ba7dfc7351781c16f70388868cee9e8e72fbd865a2ddcd60f5fe171b59339510007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d79b3a661000004030047304502202d707fd271fb44249bd7edc4c2a50ac1cc59b13c3d3bc1cb9d23bcba44300342022100fa0e85ce70e56a9e552d857749fbfadf61b3372ab50ee5dad6aa85ea19d34f08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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