www.digilio.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f1:bf:4b:9d:f5:cf:e8:93:ff:d4:ae:7f:55:67:49:d0:4a was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.digilio.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f1:bf:4b:9d:f5:cf:e8:93:ff:d4:ae:7f:55:67:49:d0:4a
Serial Number (int): 343599183396499770834379052174944196218954
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5e:11:68:0b:76:af:77:f1:22:56:24:b2:4f:16:12:8a:a9:5d:18:91
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d4:6c:29:32:e6:28:ca:25:af:e0:63:4d:ff:e9:db:12:67:1d:78:74
Fingerprint (sha256): c3:4f:1b:8b:4d:5d:a7:e0:9a:27:fd:d8:f0:1d:8a:e1:c0:09:bd:46:ec:82:d9:b7:53:53:30:7f:44:94:f0:bf

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.digilio.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.digilio.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.digilio.com

Other certificates including the domain name digilio.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.digilio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343599183396499770834379052174944196218954
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 17:37:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 17:37:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digilio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857360188380134092986731084914052806174613697547330115963718159088142078951333382049329275036933651242945843226276180189401723104557665711868477270592369931338879397713991177278534957389243255984482870115690923352353658331930616109883314630288260524310467851092299265902738842526517239085536434888919495978946181378633250709538057529240210549963113958169871094354635270901746933784287681539621960405038127889332300555816487714688611103053979697734139517064584555626270795598208252251347159478683234139481344945454426121071476750954625959756122234906020627733746514332102922759386782541594695812201916791690794868869809766541938877113512906074759076516530933885617133034751282476227623578659797293918986713998622502348813244783835350807517842184074141817703122728282618425277846804946970009870172958741852904910882972023222451175468957211599077207737359903247898277591262286196787224753024606935478150902857635232991897357592428757079610079120831023138908489638910885889857445361408790092665784071594816921509517296855313609455421670709261303432800688985457136563673326421882486719541175262899203671734168818049768659760404321266219799495829052490733512468215598565756635543951840828386808527062520545845018423913159509520260056615121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e11680b76af77f1225624b24f16128aa95d1891
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digilio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae5eaea3655536d2686f4292e3a8864575954883f93def5d896983f3e6bacae2087d63349a65c43aff07dc8f366d4fadb5b6cac3eae52ff47d5a547cbbaf64a90743636a5793f3e47b1cfa013925ab9b8714b956b930aebe2455b07496e03226027b4131ccb0a74f336ceddb4d1b80af70a1d9a17f1527e8be6e9b3a78a5b5b48179eb6a807c80ebe2f1f45fde39a79fc93d31995f43132412c1f5b266a6cf5c8b306f812fd33f6426f615439a4febd81ac58173dad9c1b626fa74c65dba48fe8e22cb50205d638087598a0a355583f67cb23ab4f3358a2938b4b8606ccd336d11206d439947bf307836514f44cda76074ecbd46e9d1aaedfefe1640ff6315d8