ambrogio.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:21:c8:4a:ad:19:dc:a1:54:d7:9b:8f:3b:7a:dc:ba:d9:96 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ambrogio.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:21:c8:4a:ad:19:dc:a1:54:d7:9b:8f:3b:7a:dc:ba:d9:96
Serial Number (int): 272832409243702071220457622655054594627990
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9c:fd:f7:c1:0e:08:06:1d:df:51:7c:b9:6e:b8:d6:de:10:7d:0f:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:05:ad:51:f4:f0:ca:11:ef:15:30:62:36:2f:3b:90:d9:81:b5:5e
Fingerprint (sha256): ba:32:a8:2f:a9:d8:0a:e0:c4:30:96:ff:37:ea:57:ce:f6:ec:c4:b2:30:71:8f:6f:0a:cc:e9:7f:5e:ef:0d:c6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ambrogio.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ambrogio.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ambrogio.co

Other certificates including the domain name ambrogio.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for ambrogio.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272832409243702071220457622655054594627990
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 21:53:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 21:53:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ambrogio.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 720260061737624369519578817119329968704093907753825937820380511269596609685745456287218063956187263403524885901992906650153370653804106181313786927442238600992219586908131927823111380404414062149617383026048616161967890106597504524353017973736083521462489165976336595793402893980261165408962578473318392070499733098507080561666770936723866237494093844677583127160884971640563010484876152770517627596359288332074478011021127016168540046706217565298790833141462693605111636432161223279508288964453544406676068519128573798074882894879281677067360480288804221940730887614645944328995158021128309363255363496676916580211189575170092989521487920736261761204360368246891144243698439367671031030059682932241632959258660403228833540841588262442363328176843609733588149683983446284227186248053710458100857423780642679811483826739271044754652573331146555841969888799663198096570752963328976909481445671227106365488479161508814705253524127134774339398871506587781254395574852877947168377011296465616961029257728315863451827787067965041134155791085432782535196919629027347856228909097846874406361466538434708927997523602741065777295487252928281966332379593930735338432770984917497055825585740050700476415186041444566355984276535272073908993559991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cfdf7c10e08061ddf517cb96eb8d6de107d0f51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambrogio.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3aca46e50000040300473045022100fd2a4fe4c7ee4b22f90797e0da074b42dd3ea0f2286b4833ae5e213af2e5998a022035a07fc1f2593b2f367a8d0dc02e25d3f2e1a86b2aa04b685c970f9eeab80b8400750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3aca48c8000004030046304402203ce18217e9d67459bdb014aa68ff0010aae4e90a8ca8841e2b5ea872fe6ac8e902203ad7188345cfc6a167b2201c389510ef7a9d808d047a3e4fcb332f57c757dfc2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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