www.pascuzzilaw.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d6:85:1d:03:fe:9b:d3:98:fd:36:49:8e:47:d7:50:bc:4e was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pascuzzilaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d6:85:1d:03:fe:9b:d3:98:fd:36:49:8e:47:d7:50:bc:4e
Serial Number (int): 334334222297429270514050341875442481413198
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:7b:13:6e:8c:fb:b3:0f:18:bd:f2:c1:5e:8b:a8:ef:9c:9d:c5:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2e:a4:a6:79:e8:87:be:ca:03:38:06:79:60:7d:0c:49:21:2f:21:57
Fingerprint (sha256): ce:2b:32:07:2d:ff:97:b1:f1:6b:42:d2:89:2c:9d:26:73:1d:bd:58:21:a6:59:0c:13:88:ec:bf:4b:e4:ed:28

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pascuzzilaw.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pascuzzilaw.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pascuzzilaw.com
www.pascuzzilaw.com

Other certificates including the domain name pascuzzilaw.com

(limited to 100 certificates)
*.jkesler.com
*.itishatch.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.fivepillarsbook.com
customers.tigertech.net
*.jkesler.com
*.pascuzzilaw.com
*.oldtownlafayette.com
web13.tigertech.biz
customers.tigertech.net
web13.tigertech.biz
web13.tigertech.biz
customers.tigertech.net
*.newmoonbench.com
web13.tigertech.biz
web13.tigertech.biz
customers.tigertech.net
*.systemadik.com
*.pascuzzilaw.com
customers.tigertech.net
customers.tigertech.net
*.mustardsretreat.com
customers.tigertech.net
customers.tigertech.net
www.pascuzzilaw.com
*.mustardsretreat.com
web13.tigertech.biz
*.jkesler.com
www.pascuzzilaw.com
*.oldtownlafayette.com
*.moneyfortwoworkshops.com
*.jenniferkesler.net
web13.tigertech.biz

Certificate

The complete raw certificate details for www.pascuzzilaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 334334222297429270514050341875442481413198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 10:12:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 10:12:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pascuzzilaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767024857250507891374433294977000042797737601784639162313678904989032957998117712067087137708488728667139401305372631682161996376658979240647484567805091972480736182375884428048599507425870104846972843694558302463588427189086929825385456051873273982706730431148250318783358283234461586537779665176872206748429110866165369775491577490714428926087621241532247943873622037401260216801195975462778600966490613522775468485163342104079374398753906232376951772305832741635254119811893625793967575864101882364742297276500678046423648057452693363805336992643770738964046553278290621003443277081711836921653662146667468439556075894826463794992654010256230235593935158895351303901251645357245440930445207060330202532634253106172887832661350435070239395176282966556303229580492540360682556777110919586226881247767574129339737636517822719667158991219019112474993897471879787662697322682032817029442274420580757761503440076431790920263032098356792324016042314066099537407815839218731933175162309349712452913773069723135787411933247768843461724688439408086978389548564768993163630327130516756083499473369144642754425587411756081617095621416297029420374794364363630416624576574070678427805987770404689942502397187130204976960232162373117444834318359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd7b136e8cfbb30f18bdf2c15e8ba8ef9c9dc5e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascuzzilaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pascuzzilaw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018df4913cc10000040300483046022100ac073e6ef7740f8f29cb16a324b36c69e7f5053d15e7db340c7ed0cad1bf641a022100842a385ce604783229a5dc238c6b5b18703c839ec2f22c325c3e7de902f229b600760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018df4913da100000403004730450220471fec42995d0c67016bd432274249221674712dccef75cadc177aa4e160c24c022100f54b2628e6dbd8631aa7317fa215828aab950209ffd3c4874b0fa4c5cc628275
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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