www.giulio.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:12:fa:d0:0e:85:50:e6:d6:f3:da:ce:0e:44:8c:c1:6a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.giulio.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:12:fa:d0:0e:85:50:e6:d6:f3:da:ce:0e:44:8c:c1:6a
Serial Number (int): 284841569510855907256692370418618656932202
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:9b:65:a4:5b:7e:fc:ac:7f:52:80:b7:87:27:74:a2:86:22:e0:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:ca:9c:d6:85:2b:7d:7a:01:6e:21:f9:e4:51:2e:d4:c6:09:da:24
Fingerprint (sha256): c2:e6:35:5e:89:18:4d:13:61:2c:9f:51:45:6c:2c:6e:21:e4:46:b9:05:6a:af:b9:d6:86:a3:ce:f7:ef:c9:9b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.giulio.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.giulio.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.giulio.org

Other certificates including the domain name giulio.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.giulio.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284841569510855907256692370418618656932202
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 09:04:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 09:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.giulio.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803154057292715372989849304525036941245738282262047816811544645911012920831788219615529226349612759686141330716816111097422508397264276157663425922759827136795082094976727606817088152091045890890245106791406365357889960125406034161785828879743418040440233569610434825482575433388040690976138922355120101247074195406786261274056000648663449416447518457948818832372410994313988444718304332890151342007243881658581374038724895652998615470708399966145084661823411151608698717218371179397038029713984633243056405280838095636376464671584738797553419062390739106465531202284896315229624183937146774468269116412704212521965032838684111708531325813379952526717297448196099188976289944739482203557987912967186122258304481372697572234647845442247789519101049809972003544729918261374756756581057088768022768354948030155586231682247807902475404310478441533900271840086203852492889226068676991800391067580163715033525764420587839913453183172450720771212781522584396218858379075515624420111625573750106841944902520330949259970900281553613924884824475875628408638474355545438922256095443294991739388992070713164493456463383073301614547934484307169739996336658008886835164146278693725356534493546269228562818725949203488636979643972016639763770551351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							059b65a45b7efcac7f5280b7872774a28622e097
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.giulio.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c32e33a5c0000040300483046022100fca24a24a3b350158afdb983accda22ffee64f24717c2da61fc22dccdacdc43c0221008721c01ec7fc9954f40d2255e4cc913a8762c542603ddaf15acdbe8ec4d37d35007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c32e33c5e0000040300473045022100a299439d75442869918930af7a9aa45a853b3edf8b102c2ddebabe2a7fc10e8902201ce0d2648dd4820c23e3cfb9f3b55b9a7601f535cde146e9925ffe874cd90d63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0056c7aa613b4c82413ac3d8a42cbbb27fc269c221b72813010b5004d7d1deb2774f5101dc7ccbf54bd3a259b52d61ed62032297df8f9a1f9f0ed9dcae7fea47e324c781f054f447b0c36364ae32e7f308483b0a2b59fd2568567effe7a40661e34224b572eea2ba64cf368cb568215ba3a91f4d21fb5e13ad0c9f1597134e7f160891cfaa3443ea39c5a47327c7de802feb3375b57a5680229265fbd0b9152e15ad78697e1275464535b1f1094825180817ad42ab696f3e23cd0065c72177ef717a843eeefa62ebb4c0f5d9097d8c8f0dc64a4a47799faf9456d99568e6bfbe218bbb8f11f67cb1b24f8e892fa20f73982ee14f9dc6166f96bf6d9f280d61ceaf