www.pascuzzilaw.com

Issued by R3

About this certificate

This digital certificate with serial number 04:b6:19:8d:2b:41:42:95:47:a7:5f:22:8a:24:5c:40:2d:7c was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.pascuzzilaw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b6:19:8d:2b:41:42:95:47:a7:5f:22:8a:24:5c:40:2d:7c
Serial Number (int): 410414498197717513243767817804322808278396
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c2:1d:77:25:69:80:03:9a:0e:fc:02:44:41:d5:f2:ef:43:29:ea:81
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d2:cb:7f:22:03:16:e8:69:f8:cc:0d:ac:b1:aa:84:ab:07:73:c6:27
Fingerprint (sha256): e8:e0:92:c9:64:b3:01:87:0e:8e:b9:9e:95:bd:aa:eb:28:01:71:f9:37:31:60:64:c8:49:a6:fe:56:2d:ac:e6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.pascuzzilaw.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pascuzzilaw.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pascuzzilaw.com
www.pascuzzilaw.com

Other certificates including the domain name pascuzzilaw.com

(limited to 100 certificates)
*.jkesler.com
*.itishatch.com
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
customers.tigertech.net
*.fivepillarsbook.com
customers.tigertech.net
*.jkesler.com
*.pascuzzilaw.com
*.oldtownlafayette.com
web13.tigertech.biz
customers.tigertech.net
web13.tigertech.biz
web13.tigertech.biz
customers.tigertech.net
*.newmoonbench.com
web13.tigertech.biz
web13.tigertech.biz
customers.tigertech.net
*.systemadik.com
*.pascuzzilaw.com
customers.tigertech.net
customers.tigertech.net
*.mustardsretreat.com
customers.tigertech.net
customers.tigertech.net
www.pascuzzilaw.com
*.mustardsretreat.com
web13.tigertech.biz
*.jkesler.com
www.pascuzzilaw.com
*.oldtownlafayette.com
*.moneyfortwoworkshops.com
*.jenniferkesler.net
web13.tigertech.biz

Certificate

The complete raw certificate details for www.pascuzzilaw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEApRhJufPAT0OXyG/6Po84
qlnKht5OVCgJhnxWZ6EtfYvPPfMmYvdJ2nQLlMzNbgUuRStoWFTd9PNSO7o8J8yQ
EftEr8m6rhAKG0L2ylHWwdF7z9EqLFHS2L1K3zryIxeDIo2itqrz1aUwNaV2BjdE
pv3Da57P+kcNT1U8M1cr8FI7KuwX0dd7sMsCPEbchLkd77gZIivE74kSoQCur9j+
2aXsXiPzU9Yy89UBqlJkVuTWlOZg6pyP3Cl5L2RtG/lJ+jXmLipPYoxXpfo3f8tw
K/lJoiWvDnUKk3bNi95/8dKXI/LLk8uiDGv+0eSvtXpvAx6E53Lqw5ZjI04/+Mz1
TmbS3er1ro6hEocfNnaXSHgL8Z9LEG8AEAms7USL0kNg46z7GMsVwNCA8iuVgXLM
AD21Fp8igk9rFpBPd1v0VdRwcAB+XDU9eS/QJBUV8w6+uz7dm0YZZov+m5v1W5Si
lBWx04FcAshjJ+TTLW7KeMPkFt7xbHcaKPlG5MrsF6CWzCs6bNTAE3bU1jME50w7
rRwx7pY0ZsC1Bp/INM7IGU5/q8ceZKbUV/GnHuYh5rHn5J3G7itNlY7vS6CN9Y7w
APB+8X4iOk4OxIbYcHeysA5j8wXShb/3txxg6ezdDtHMG2nGQmUJegt1ESWNbFL4
kFmLsrbfGiexnavc/rHCWIUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 410414498197717513243767817804322808278396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 11:02:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-30 11:02:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pascuzzilaw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673528327353154658915834495973569377460539922788382290041912281638147984225839827405059048476757552718756075038779921482324148176980786532644052628795281547643070442376790263852261728581877091464546004084879921612639813594269924435386681252784028943079568709978861391040882174419198755853525104077926369385863629625419892605490471633601679298593596306781820419538393834375348792102514014739924865603403281143554070517599606537909303120097386897650146064983409443521606641985012270578717727620828098490449276833546422671185499970964053867390644080184468120263815965774531557169943316620690227481443370714541920413005801734583581256158690456834702350700183205035877143257480239954683101210072697542511334035710812952349879904492138180832469987229015878075522491546101103919475221321156216275805300336337476364779701355979792595575529049501569121533747366258520046759609306905867145261880140235073944226906430716839779338062855942352207686283729471419949922385246765520832938356686526567391999856213805855128754348539415514421640497920234647123901330408729903938296486242953951170748156443120453773208849239293079392811549962462551875530584459697353629974648557793189461891587682663728677985713980358036593848350405975804181370485495941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c21d77256980039a0efc024441d5f2ef4329ea81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pascuzzilaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pascuzzilaw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cbfc17b6a0000040300463044022020bcea24be23bb0776a3fe3ec3d388b22b9127225693501c3508d987ee594040022051e0e180d974ebc93159fe3d0741ed4fdb177d197ce4974b9129a252098cc3b300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cbfc17ca80000040300473045022017d3c7aace53769110eddaaabbcc6898d06d29de06f803b3fed8ab8e9687db90022100837babb9bb029d1405cb31d9ee75feed887ebc97716351f8b9e30bb09bd988dc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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