www.buongiorno.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d6:47:19:35:e9:dc:0f:7b:44:af:7f:46:4b:d8:b4:64:b4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.buongiorno.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:47:19:35:e9:dc:0f:7b:44:af:7f:46:4b:d8:b4:64:b4
Serial Number (int): 334251790404979739796228963218290512258228
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ea:dd:db:c6:c3:56:ee:55:6d:3d:46:f4:61:7b:ff:8c:b9:24:b6:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:91:e4:c0:d6:57:28:a0:10:d4:af:6f:a2:15:bc:2a:d7:dd:1b:a2
Fingerprint (sha256): cd:ac:51:4d:85:bd:1f:61:5c:de:97:61:49:50:43:47:79:4b:1a:3e:fd:44:4f:7b:8f:2a:7b:ce:55:88:eb:4b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.buongiorno.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buongiorno.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buongiorno.co

Other certificates including the domain name buongiorno.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.buongiorno.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334251790404979739796228963218290512258228
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 09:39:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 09:39:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buongiorno.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802112221751245419095251555543396893625714592936144592005444344489171390014558116145263376032480110034249715561630686738864828204208990567713184381352784782907848436874402000543187846969731761055130319537155634454733223216971710010141845068954687418094392226732510959212219805148619698706672731305728148132554972656975774363384845313410553932576157197409240026437817834252333023067549580824827239931253160129446370469166337028888065531257422509834184008153314299183579747587402789318910228328565394614471929082367239189880105928603922950255839186380041946441274695020844893876134784483735189606108455797554933374575800617797759961790192764049535131423069034286512514157054559462678446454483720894874479023499647971678395744645766412553969740784131112706771358663590905366979364628163549051705081860785219307267354389661399053061589316266082381441688537505571772442719793949622709180213707961429855674164158781403034035793767487943849715489745550715129725746912075776949378597572103108609330795773044623775735905969331052911961393429693157484455127246740987348402612487869912686336079201989854465443785935226536892259087729240158889326441016784106148735897984936678908990935537418042158870696662151402061708798661868659136527660251531
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eadddbc6c356ee556d3d46f4617bff8cb924b635
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buongiorno.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ee5175de20000040300483046022100d541e5640c0b8514ee93086458df62fb7c997b4f8afa9558f6adfb4d886b86720221008e05269b63206000e1167a6532081acba1e383ad39960c1e050f225c7048b3c100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee5175df00000040300473045022045bd28f44606a49a55a08a7125ee6cce4c934062504e2579df1934299cbca082022100e905e440f8cef1f0adec0fc74eacb01f620312077c66adf7606e52b537e23437
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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