www.fasciatoi.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:58:a1:fd:9b:e0:f0:32:ea:c4:70:4e:a3:36:7e:74:09:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fasciatoi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:58:a1:fd:9b:e0:f0:32:ea:c4:70:4e:a3:36:7e:74:09:79
Serial Number (int): 378609314536105087064709736912112084846969
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: b5:a9:66:18:5a:93:b3:39:70:4b:86:f4:6e:f8:43:a4:3f:db:81:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:01:72:c6:4c:60:8f:e5:ff:cc:c4:0c:28:0d:e4:45:07:31:24:58
Fingerprint (sha256): db:8a:8e:b5:1e:62:4b:ab:1e:08:d7:c7:e2:49:3d:87:16:fd:c0:d1:ef:1c:2d:19:36:d9:4a:3f:eb:55:46:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fasciatoi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fasciatoi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fasciatoi.com

Other certificates including the domain name fasciatoi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.fasciatoi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgISBFih/Zvg8DLqxHBOozZ+dAl5MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMjcxOTM2NDlaFw0y
MDAyMjUxOTM2NDlaMBwxGjAYBgNVBAMTEXd3dy5mYXNjaWF0b2kuY29tMIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzB60kAQdRAaDEztWCzBwaOoXwGhB
IfGdHSa37SlTeQJm5StwxFsJm5TlJr5JVpYYOVbhdfu/LuyHcCq95mwf7T99nPb8
BCsJHoSLhhcTtcRinozGmIxafDOa3ObLI5hgjIx02DTz4yP/UMODBul2fbjaK23r
WwBgeR9b+S70UQeORkYoDP14pIxYAhEG/dEnouJzSPBoHkmm8HFL2pbA2ybpqcxA
pnxuMkEGYgh0Lz5JiC87A+2IaX/GOlkBAbP6UJsJ4NOcAZxPblsEVQQwxE8NNkib
e70y1NSy5NVtlyTk+X0C1rc+LCn3IHM16FJRxSyZPK6OkSAPKO0JBLAqDg8p7gHM
Y/XELoYTT7gA0Ha37vPg1vDdpy/zEXSrooSVOhe6y6/DhOfoFb73sYvL3aIi8v+Z
NjK2qKJT57u3Fn2W4pTyxTY/pZ+XUQ6Jwu9E5k2xIczAuZ2da+5gAGJQ12Wt8vQv
O+TOJ/kfsqZJ2PstI+H9s/0/uF9aDd3B/GkGYBQpZjYeci2hAyfUBMEMy/7fcrYP
VT4Nc1VAREGIugo3z8KjfUnE4YZ/OrdL49kIT7ZnlE7EHwtPpJG9FXjEOFULio1v
s7DDxCB28tWbA6RYR4zsu++YHiQahivsk9PZ39V0BU/XJrbFdkSDqk3C/u6P5iKh
L/KGprwZDqn7IGsCAwEAAaOCAmcwggJjMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
talmGFqTszlwS4b0bvhDpD/bgSEwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzAcBgNVHREEFTATghF3d3cuZmFzY2lhdG9p
LmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsG
AQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB3AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAAB
bq6UrMQAAAQDAEgwRgIhAOXMFsMkMf/CRdqUi/KhFCCkWOFMaLvJNy7EcEFQF3yb
AiEAu5wKWxpyrasGF9JGWUjLHtqIuBxL+zA5To/2cVBYm6YAdgCyHgXMi6LNiiBO
h2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW6ulKy0AAAEAwBHMEUCIQDQ0s36CNtl
bIHWG/aNbMknJlmio5W1szO4WSX+LnjmCAIgO3BN+UvKBflkI5mazQTs0SvtvNvn
/cVpI7QWCE0WQpcwDQYJKoZIhvcNAQELBQADggEBAFp23xtLV3CZiO2cWnK/cq4T
APlVpeMWyjZLld2NZsDqwwPthlQiZV7fwlfHNjlSsKtoSFVLk53Z3YDT2lxu1da8
Xz/YgnYilabuzVdspVs2Yu+1KEZX+iTbPE8uyU50hgqW3GpSBauupoLIziepvcp8
oSr45Jy+ufKuMGCsuizHZu7t5tp/RjWkobWveiCQeG6p67fpx1BP8e3fd0UJSE55
HfDOn2cZap9MiAG6Z4WVkbDeS5Khmlc4aWosx4KEnG+RPfEOk6O5RE1/zE8xxIyt
KuSHxtNYxB3/1WV/kpStMOShT2IDNgZ7xVKUOXpEhrKsSf1B8Y7dmvVbiaskoE0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378609314536105087064709736912112084846969
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 19:36:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-25 19:36:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fasciatoi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 832736713262192094472874969804935022425019224436240554821904469812242441411323286825495506811356467313804837044070205972916441161909529619803951175408499762935096236441576925695451007340787459174712765992668143808576987706895997151169380439315235877590468846888344767282751573429392300459885102368762318264209112465610494681342384810284460175743100413914966800916739068468574809593036529649207998274288008447659770500746414426515704220563464890444627400033150511805646654261923406748249509879889987671731663672327638132240934209900240413123515694483179437507476383797783260507352668098682602181276585280148154899965359392511607851480035825920358890051270181736021246922430086486103237009746045478222129197766735310487975036094214319071680902647325174286777660852963782652501031793963635685226258307361072991315309729089508607231956013544392781527010446005230135995908255774501871365040770713755656390086692619745421109334588428504617645329361643052269099563971305674320327589153733339340523424121486033923052099875540505557891176492378630093752983362536270304518304477878092799401337037753427587795657976905248043834017770887617463153392623435590319668848618408810610533242016098906772318874639719453781903567871194222211043061080171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5a966185a93b339704b86f46ef843a43fdb8121
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fasciatoi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016eae94acc40000040300483046022100e5cc16c32431ffc245da948bf2a11420a458e14c68bbc9372ec4704150177c9b022100bb9c0a5b1a72adab0617d2465948cb1eda88b81c4bfb30394e8ff67150589ba6007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eae94acb40000040300473045022100d0d2cdfa08db656c81d61bf68d6cc9272659a2a395b5b333b85925fe2e78e60802203b704df94bca05f96423999acd04ecd12bedbcdbe7fdc56923b416084d164297
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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