prestigioso.com

Issued by R3

About this certificate

This digital certificate with serial number 03:a6:af:0e:5d:48:53:09:5f:92:d7:13:61:ec:97:0b:30:7c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prestigioso.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a6:af:0e:5d:48:53:09:5f:92:d7:13:61:ec:97:0b:30:7c
Serial Number (int): 318056420187569124068250317255754818203772
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d9:a1:d6:c6:f5:ad:8b:51:1f:a5:ef:94:29:c1:44:3c:3c:11:0d:6e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:93:76:e4:0c:e6:44:c1:be:d4:c0:ad:b2:63:9a:8f:57:89:57:5a
Fingerprint (sha256): c4:a5:07:a1:67:54:13:bf:e6:dd:47:92:5d:19:ee:40:5d:42:ad:f9:be:ec:b5:6c:f1:52:e8:31:9d:e6:c8:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate prestigioso.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prestigioso.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prestigioso.com

Other certificates including the domain name prestigioso.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for prestigioso.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318056420187569124068250317255754818203772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 14:32:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-15 14:32:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prestigioso.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 657309325800105678323805156735680758834993813924870644359649559937582698417189120802248933062210748580118975461644951420222221953783755105993095155163684871598949396800167325849664040153694615828928358503241859420806745697645810555976087890024040542129329316665784264831299343248068668738226773967563498849008403642086528367433740744216968192765667040344038634296294640215151631143610809337062341185304121052902623041595530071636463035702126699494063384881872736115582616123354073554785550306933175150021176528781602966273252907052279706363534365719790229876968728048933009522813002662142429066496823176276887625934463985519448134207005137155500519964728868929259613220184839947941230547223212641071368279107652594994037727156274815831538584701687662026603874504298458460635644297945632445010349995199739327339222011889485142064181465979652162896818546257658298613030753290915530015487540425849096975479379952553858110071111778772112927499621349578723881233989630484661864164081792831254139994192101077047383566697371910675124467927399457788821975894083531636661508017150102418299303026828772926494987871452463334679545086470242610607579298733658206937311400627390721048672142180304116668405668139578337538991195405065201091965553361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9a1d6c6f5ad8b511fa5ef9429c1443c3c110d6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prestigioso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c7341e6530000040300473045022100dc88b5916f960756d29ee39d7bed693f8b4f7afa7fa7c2d106aca33a01eddbed02205d13473f36882549a8321e819d006f15732458011eb21af3e1064384e083519700770029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018c7341e69000000403004830460221008b9b64c32452ea98860f13404a367bf33cdff0cc020fc93c919c19b929882d16022100d164858448f504223e5195184019dcf864d91cf8d3b9182d8bd5110edf26c5bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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