studi.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c0:87:b3:7b:de:9e:c7:9b:39:e6:39:1f:4c:8f:b9:c1:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=studi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c0:87:b3:7b:de:9e:c7:9b:39:e6:39:1f:4c:8f:b9:c1:67
Serial Number (int): 326851449957043739569974023551933744791911
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4c:12:2c:4d:56:de:d9:25:1f:6c:54:e9:26:e4:08:65:41:53:8d:a3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f0:2d:6f:f8:c7:b8:76:fd:35:bd:15:4c:30:a2:73:85:88:1c:75:0a
Fingerprint (sha256): d8:37:0d:a1:80:bc:0b:d6:97:4c:11:75:f1:8f:9f:01:a9:43:3d:14:bc:64:d9:69:18:73:1b:bc:26:92:f6:6f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate studi.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for studi.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

studi.org

Other certificates including the domain name studi.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for studi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoAFl01MmYH1SzgkSOEVd
KtqH4MAKnIQxdfa/69DKdx9chFXTyeB/u0m3jHabV5YPtN7nZHw8xtIrDYN5eaBW
zH1wrR83HZup9fAbw9b7I90Hbj1rlx4rwWZFfC/Ahrhamj82Of9KOqGah0z8aCtC
zcQ/PBBukMPgHqfXMA9GThabzMEO6UIv4wslBo/x8Mfxhxc5cz0Uipz2gB2gxylE
aVbCvcc6IR+YwlEZzwzKRH8wE4zolRKePkfPHF4g9U1+O9MsgWkfQWt/yKUNJhZz
Zz/4qloJyRL84uXkvC/G+NT+m+EY8ROLQ6fU9NfiTsnCp2J2CiCZ1NaSB8xSX8D+
NePE+7Sc1DeoH4zubvCUzW6o8wnmJbHzBa7pAHLH05ND1hYByt383wwH2e9sroe4
jBOFWg0Hqiwh/pZZXIroCOljNL19IPzaNcrMG8vYePW02JE78jAFn7OYuRCIEmKn
K1c26HMgkvstGMqCtEFJMRg2i1ibPoFsM0KJBE5REA9Xzp8ljBDc3tASaGxtSNaU
F2IZi6waaqOIvwWpJqpVxktgymuGk2RuGR4JDc1/GlC1ikeUhe/nLjxoZMqar7cz
gKJkqb9XEEsqbtCYFULt7pL6HH7t70yBNtsdyJJSOnjUSRd9EpvhJqbEUuzA4yPa
xSv0gP5odTCXRavsX2Z3SiECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326851449957043739569974023551933744791911
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 04:36:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-01 04:36:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'studi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 652765325673069176415449559188844713063405751331928064291268239285848867913694894575293360984907474790139974114523924454186210365951121316842086846171885537036658257375699403112195335312862471087026791653015993884604704459602634010868300846217465375001924004138899547285486001757134814004170609419543649723108980488346635104828900205924868056514816003907222045858942400138988812752004325908463629553540172305588748688739008214065540861409314016469615579793919547337041764045473907194049067267189946633450266183540725349232456605790342806360890015357494811201387598093334558376640508323965189607701413859028197285955244726730925559758360468287079878199980462780539905192677436277889950814150227962776365541846691455188054921211323324156108671586109059443829007586414209858361407737589981957642331602001711216412345260851435273357686370949327920708260634110277382861254894432206518005715018562337732617845089277368961193057348679223025164974185318043364182626140762759001778269494307656135544967549210580556550004331530786957817971348438505396296263644802193012099901527618022430055708895132401022044444967337237750037250512103690533535427098179669835262990998167851546733537684908526373636712849548434142585391627222756476306817763873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:12|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c55fb16000000040300483046022100e83c6d8617bf2e033474339fdb23a32016e7e99e5421cc7d309b9f895b1874b4022100df35a488601b3c9067ae4c550ed61b93313ada3d738a0a5a884ccbca7b56b448007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c55fb15f20000040300483046022100d3d5a38ff7ac421a691eb5b93b0ee32304cc03398094316c5dbb39e75734f7fb022100bb6d78d4a14765776045d46ff9be8ac00ea48c1f5e98ac7d4cf94b63424c5998
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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