marzia.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cb:af:d5:7a:5a:4a:cc:41:bf:be:ee:de:85:b7:e3:88:35 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=marzia.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cb:af:d5:7a:5a:4a:cc:41:bf:be:ee:de:85:b7:e3:88:35
Serial Number (int): 330647901620332131312852257755118027638837
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:d4:04:78:6d:0e:fb:cf:d6:32:63:d4:00:ab:57:59:43:b5:1d:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 35:c8:c3:06:68:3d:fa:50:50:76:8b:4e:89:1e:2d:1e:db:ad:c8:e0
Fingerprint (sha256): d0:9f:32:86:71:c0:85:e5:e4:4c:9b:e5:fc:4e:a4:1e:49:ef:15:e1:a2:d2:a2:4f:07:62:8c:96:e6:9d:d5:27

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate marzia.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for marzia.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

marzia.co

Other certificates including the domain name marzia.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for marzia.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISA8uv1XpaSsxBv77u3oW344g1MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjgxNzI5MjdaFw0x
OTA4MjYxNzI5MjdaMBQxEjAQBgNVBAMTCW1hcnppYS5jbzCCAiIwDQYJKoZIhvcN
AQEBBQADggIPADCCAgoCggIBAL+/2dlsbCNM+FLBvGdt+CCdiwSfiUDSzzinBXoK
DMkFsQl2W51K47dyO2OaGhKU6wXiO3YpgqEkkofoxoQzqnMDzQaRq3Cl822/qwXh
lVGDc+lSvop0j6Cg/EVBWz6WoeazGcG05KPV7VYdnUMtyHd2G3me3FjX0bdvoXBw
Qu9Ll13FIn6rVwkF9WxCHQ6fdr1L58BRoT7gtJJUL4UWu4mqlprYwu1z4VHUVp68
KDu96Lcwb2rIug73gCEHpw2k+DOugKyLkAvu+maZAcavbVAsjncwDSfCtX95tl9E
KR/XFJ9ZJDaloxIShB5nzlhpOETuMryuP4byoUbMy6CqPrzvJlVKHDz74GhEeSl0
rqy2xQEeudULI5dq7OeIBM1M0GHEjkj6eYz2ONkS+kYf0hLrPqIB28ufqZn9ZfkS
SW5DcosYGbYuUGJ8sqZ1qAVlGH1o7DbBFthG01LCtN+kH0uUtzKGjRaIjHgNJzR+
VMCqGlG5q2l+uafQ1owgnVpxRXAexsErfFlkQL8KgqtUr4VHpkZZDPGmyQTvj8mX
29S9iXG2xKVgb8AffexfsHqrkdcvrVuTSc6qONTU+/aihjmZ6SQL2apPdJpJV7sX
zh2bqEhyLdrsCRcM+y8xZmUOVw2evByCFXTHGBxsNMfKHpOEeorlt3Y5CW4cpsZx
wIQtAgMBAAGjggJfMIICWzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFDnUBHhtDvvP
1jJj1ACrV1lDtR0pMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8G
CCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxl
dHNlbmNyeXB0Lm9yZy8wFAYDVR0RBA0wC4IJbWFyemlhLmNvMEwGA1UdIARFMEMw
CAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9j
cHMubGV0c2VuY3J5cHQub3JnMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA4mlL
ribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFq/7RNQAAABAMARzBFAiEA
wysxesnE8otBDbXMeM2qZ1Rl1MCr21JJfJQZUnkC7DoCICbZRUXEcBc/c1wPgI1c
seUWCuDF/f21vVJ3YcqjG7JpAHcAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz0
5UVH9HgAAAFq/7RPVwAABAMASDBGAiEA/phiN1gmtvL2P+UJa8Q6lp6brZ5iLPzP
woHiRgv0n/oCIQDWtosbEQyqAqBYGwhanROQN6rhFxOOLaqRX2tdhoazrTANBgkq
hkiG9w0BAQsFAAOCAQEAMqaYgbEHIT+jCiJcM17wFMyn9HYRBCoRGdMP0aqdRukY
WHkNE97Tgv96h5IqQVzwBbepRX0T2tx4rbpDsAQw3DV6EMgSkZKXSzZN7XvrvqCL
j+6p6CgIqSb9qI87qDhNOITT2Q6bqpl+XJ9AizyYUWaeywh61IBdsKdtIuJgh6CV
BaOnN7/3HKlGLL+hyxTWtoGs2JWfliBG3531gMrEq6zGQi3b91qNToheREw9sv7R
oK89SpZC1JNCA+HZO6QD0fAHslsM8UqI4qlvCaqflk3rGyElbUVResHlC6+HEXxB
6e7X5XO3GsEie6j3RB3tVHApSQ9BKAUvQm2DmHKsPA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 330647901620332131312852257755118027638837
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 17:29:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 17:29:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'marzia.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 782269375146107653522163999823371491861724222718742781632719900571771695443625600809577405584475525924883043740606099289188112398606365082255199730222768339691916984029458388369120308527251429370579673294544256161048891041416064284661267322382601142863951519017637911398598203305184348976926931588050517603888320450389470486643288571934600259149444482425257119418071256942192557990290493364995260042846293392998067390313967732561045167421913906226809747140177410371904262961439908487978010589686307034342969501096978039430079653090668545060699843501414601598600999894895795656220046519030749303591219312802319734328662053165484618184002984977868387536133935125392055908573901751317649576463104455676548518989347582512318916679256628258633748066232912424613358398668287010569301012534909498805928466442641526764522693692757936502681416002668583709007665605967305580766373421079652841737981214844648226972509659252602071350844425151652364819731204560736399065835259129973472249184322611787942702759425949456375087549066677534159888948643321898079486704229968991188052680919910425493782121728051872069087668374013463148518378765184575504917972528368083007311744858589279506009253465170756052605623255149956988840639757619407475118736429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39d404786d0efbcfd63263d400ab575943b51d29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marzia.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016affb44d400000040300473045022100c32b317ac9c4f28b410db5cc78cdaa675465d4c0abdb52497c9419527902ec3a022026d94545c470173f735c0f808d5cb1e5160ae0c5fdfdb5bd527761caa31bb269007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016affb44f570000040300483046022100fe9862375826b6f2f63fe5096bc43a969e9bad9e622cfccfc281e2460bf49ffa022100d6b68b1b110caa02a0581b085a9d139037aae117138e2daa915f6b5d8686b3ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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