ludovico.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2f:f4:55:2e:56:83:f6:17:97:d2:03:1a:ec:62:a5:84:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ludovico.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2f:f4:55:2e:56:83:f6:17:97:d2:03:1a:ec:62:a5:84:5e
Serial Number (int): 277654902956614646443644073439093189870686
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ec:d2:a1:71:c0:28:8e:7d:20:7d:f8:4d:78:7b:4a:b6:3a:60:2d:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d5:ad:8d:17:39:8a:a1:8c:11:a3:aa:5a:39:f2:4d:89:14:e1:bb:6b
Fingerprint (sha256): c1:d0:e0:bc:e3:b8:8e:49:92:56:69:42:e0:00:18:6c:e7:0d:87:17:ce:b1:54:59:b9:68:09:14:31:fc:a7:34

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ludovico.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ludovico.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ludovico.co

Other certificates including the domain name ludovico.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for ludovico.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277654902956614646443644073439093189870686
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:00:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:00:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ludovico.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 624754699094715243696901133332298062566432307923070506352618021465318353514113960385971586307779585325944432628490289347340749734469210936154300147077339472812614964768511831491948901187223039845318091708927140499907948273374931966912595971744899133805430466898626986172890039199594399798556147607145618003001923542258942825499501690666355825058996137105264541749679748577190818002196314945649430083873039862487245737198491930088719217627441659748562893370338013177245548857731215809738589383331469018472460233169741852777953321348284180315165737015919033006052274135968615083509549462446189059741478566239327192922901440670179318478723635677923886442226798569856796664537745520004010726741693962507328499480827819589626731450104771811129533664853831568703151625178360590609702633688794065349208702080123804036012384132944583218144277508987248458573571877768164678348942300271027410758369357771341473505466323060562304887094789913160517944303848426084799973184165321372033158231402380412154739567653613454462946329705230324657167232704479278977323896208612020088989165218546497877806773899770158676419513039974553094895671587617078165744540689988371529744619085675487979053455975229206588343146170028723643144796205364088737135066479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecd2a171c0288e7d207df84d787b4ab63a602daf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ludovico.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b06de190000040300473045022052dfa649a37b73ab2a1811bcd27cf89df12e8597f72904a2f884e0e8b20f5adb022100d91b5c6d4f10d7306f96ac6e89d4ab17da5ad0ae911842d13e87ce1b92943444007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b06de3800000403004730450220428263f85001b224443a5b8cc931f42895b6a8312de1070638882caabe475bf5022100f08c93554050713d6fb820526c727136c8b594fe9528dbd2b74ba8e91d70743d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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