www.buongiorno.co
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:d6:47:19:35:e9:dc:0f:7b:44:af:7f:46:4b:d8:b4:64:b4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.buongiorno.co
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:d6:47:19:35:e9:dc:0f:7b:44:af:7f:46:4b:d8:b4:64:b4Serial Number (int): 334251790404979739796228963218290512258228
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: ea:dd:db:c6:c3:56:ee:55:6d:3d:46:f4:61:7b:ff:8c:b9:24:b6:35
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 53:91:e4:c0:d6:57:28:a0:10:d4:af:6f:a2:15:bc:2a:d7:dd:1b:a2
Fingerprint (sha256): cd:ac:51:4d:85:bd:1f:61:5c:de:97:61:49:50:43:47:79:4b:1a:3e:fd:44:4f:7b:8f:2a:7b:ce:55:88:eb:4b
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.buongiorno.co
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.buongiorno.co
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.buongiorno.co
Other certificates including the domain name buongiorno.co
(limited to 100 certificates)
Certificate
The complete raw certificate details for www.buongiorno.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISA9ZHGTXp3A97RK9/RkvYtGS0MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDgwOTM5MDRaFw0y MDAzMDcwOTM5MDRaMBwxGjAYBgNVBAMTEXd3dy5idW9uZ2lvcm5vLmNvMIICIjAN BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxJ0APohEGKmlrzaZi70LBOD6Pfyx pvLVYlKuwoJBP+zQEKTO8Qg/rN6ya0pj2K/kW2hqQQ8HQVVyZIuiP+Xe1cNfFnxy 0XsMS7EBS+QYqACmCm/kYUMVsAxZ5j6qztZk77eEZwZcMpuQz43HvT+MhnGPlVDa nO27p5IYo5s91+akr91fQVlloKpn8VYz0hiNNEFx2lpw7czJWoFhhldMZ6Ot9ZMT XPc80a1ZAtiNR7I0lnO/NjEy+pS3ULV0rkGmHEPpUK/1/HCcqyq4FjVBzTf5XmU7 jb7Lv2gGOllhKrRq1HfRrh8TQ5tPTlsxpvV2rNCl5cOLUyFshkhElhE988E1Mpws 5INZVilIPwuxuKxqUFhzJtF1uFaA3eINzik5dPJd4ljBb4mbKoOccY/GxQUYGU8r bxdPKA+pce3db1QEuKioJR2CTJ6hWF31Bl0mlAOvSG5IbxY5xqrnecj4TSwg/EMC sM5DEtaP0oVtJ67GZ1JxomS2HkugAn2FkHTfa3z1jpJewZmOG/28aa9thgGKxFY9 yWVOGKuYuzIr81Ac9i/eP0HU557/rx9pnEx9+xJ17y4ztXBZhD/TWC4q8S5lmFL+ b/JoYC9GJiuIgFNewIgH+M0AEgjxPmp26W2C/24igmSiG8uItKzIeWeJclCZf4TD DX905/gfXB3ceYsCAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU 6t3bxsNW7lVtPUb0YXv/jLkktjUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl 7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cuYnVvbmdpb3Ju by5jbzBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC BAIEgfYEgfMA8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAAB buUXXeIAAAQDAEgwRgIhANVB5WQMC4UU7pMIZFjfYvt8mXtPivqVWPat+02Ia4Zy AiEAjgUmm2MgYADhFnplMggay6Hjg605lgweBQ8iXHBIs8EAdgAHt1wb5X1o//Gw xh0jFce65ld8V5S3au68YToaadOiHAAAAW7lF13wAAAEAwBHMEUCIEW9KPRGBqSa VaCKcSXubM5Mk0BiUE4led8ZNCmcvKCCAiEA6QXkQPjO8fCt7A/HTqywH2IDEgd8 Zq33YG5StTfiNDcwDQYJKoZIhvcNAQELBQADggEBAEprrpfgr+kcjur82xm5c9FR q75qsXcFZwu7Wrk8kEMIZ8DS5DrTE3pFNpGBZQG5LgRVFuOg4xvMCJzi9oc+Twk+ /P8tcXEN5NGOxztut8ikymNjBDWPYEQikO7BdT6U7TSpvc2Ji7588tOXjLSOEnJk B0KjXPekdAH96rbgYe9ej6Kh/bQhJtg+xBBnTOfmQeFkeEoWJA4BLSEH6UadRhn+ ES6rEdRtmlOj7CBjtQU5xW3SBsLJfHJK86SDDRAudN8dDTW/szkg7wRd8+y9yuXS pJ5m5t6WRqpodRJ6u5DJZzwvMhY2OiXkkLyooQf7Sra0phrawYJHAFr/ppXx2C0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAxJ0APohEGKmlrzaZi70L BOD6PfyxpvLVYlKuwoJBP+zQEKTO8Qg/rN6ya0pj2K/kW2hqQQ8HQVVyZIuiP+Xe 1cNfFnxy0XsMS7EBS+QYqACmCm/kYUMVsAxZ5j6qztZk77eEZwZcMpuQz43HvT+M hnGPlVDanO27p5IYo5s91+akr91fQVlloKpn8VYz0hiNNEFx2lpw7czJWoFhhldM Z6Ot9ZMTXPc80a1ZAtiNR7I0lnO/NjEy+pS3ULV0rkGmHEPpUK/1/HCcqyq4FjVB zTf5XmU7jb7Lv2gGOllhKrRq1HfRrh8TQ5tPTlsxpvV2rNCl5cOLUyFshkhElhE9 88E1Mpws5INZVilIPwuxuKxqUFhzJtF1uFaA3eINzik5dPJd4ljBb4mbKoOccY/G xQUYGU8rbxdPKA+pce3db1QEuKioJR2CTJ6hWF31Bl0mlAOvSG5IbxY5xqrnecj4 TSwg/EMCsM5DEtaP0oVtJ67GZ1JxomS2HkugAn2FkHTfa3z1jpJewZmOG/28aa9t hgGKxFY9yWVOGKuYuzIr81Ac9i/eP0HU557/rx9pnEx9+xJ17y4ztXBZhD/TWC4q 8S5lmFL+b/JoYC9GJiuIgFNewIgH+M0AEgjxPmp26W2C/24igmSiG8uItKzIeWeJ clCZf4TDDX905/gfXB3ceYsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 334251790404979739796228963218290512258228 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 09:39:04 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 09:39:04 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buongiorno.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802112221751245419095251555543396893625714592936144592005444344489171390014558116145263376032480110034249715561630686738864828204208990567713184381352784782907848436874402000543187846969731761055130319537155634454733223216971710010141845068954687418094392226732510959212219805148619698706672731305728148132554972656975774363384845313410553932576157197409240026437817834252333023067549580824827239931253160129446370469166337028888065531257422509834184008153314299183579747587402789318910228328565394614471929082367239189880105928603922950255839186380041946441274695020844893876134784483735189606108455797554933374575800617797759961790192764049535131423069034286512514157054559462678446454483720894874479023499647971678395744645766412553969740784131112706771358663590905366979364628163549051705081860785219307267354389661399053061589316266082381441688537505571772442719793949622709180213707961429855674164158781403034035793767487943849715489745550715129725746912075776949378597572103108609330795773044623775735905969331052911961393429693157484455127246740987348402612487869912686336079201989854465443785935226536892259087729240158889326441016784106148735897984936678908990935537418042158870696662151402061708798661868659136527660251531 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) eadddbc6c356ee556d3d46f4617bff8cb924b635 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buongiorno.co' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ee5175de20000040300483046022100d541e5640c0b8514ee93086458df62fb7c997b4f8afa9558f6adfb4d886b86720221008e05269b63206000e1167a6532081acba1e383ad39960c1e050f225c7048b3c100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016ee5175df00000040300473045022045bd28f44606a49a55a08a7125ee6cce4c934062504e2579df1934299cbca082022100e905e440f8cef1f0adec0fc74eacb01f620312077c66adf7606e52b537e23437 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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