costeo.app
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:9f:f2:cc:de:e9:04:0b:8d:83:59:4f:ea:11:e0:6c:71:8d was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=costeo.app
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:9f:f2:cc:de:e9:04:0b:8d:83:59:4f:ea:11:e0:6c:71:8dSerial Number (int): 315764491060405392159621561713900445790605
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 3e:db:2c:71:56:a8:2e:45:47:b4:b2:7a:8b:46:ee:80:4b:e2:8b:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 08:ae:b7:9a:1c:27:91:da:02:53:15:60:c0:ec:0b:3d:9a:a4:55:53
Fingerprint (sha256): ea:40:67:d2:e1:3e:5b:47:aa:ee:a3:d5:72:b8:2a:93:74:d7:a2:dc:d8:e6:13:16:39:0a:ed:68:44:e8:a9:bc
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate costeo.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for costeo.app
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
costeo.app
www.costeo.app
www.costeo.app
Other certificates including the domain name costeo.app
(limited to 100 certificates)
Certificate
The complete raw certificate details for costeo.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISA5/yzN7pBAuNg1lP6hHgbHGNMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAxMjExNzI4MTdaFw0y MDA0MjAxNzI4MTdaMBUxEzARBgNVBAMTCmNvc3Rlby5hcHAwggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQCoawTo7C2TMyO55Z/NXL4155vb7eyqaUZ73RN7 u3kbVrvQ9bwmVIN1CoLiyYtewDBEkbCXgHjL3vXvKGoELV9+o6HagvmK5946TN98 /dgV6BM+tmrsRVy6QawlmeqG6DIdKU0Y8ckHaB7KnuzSp8xcxzbuGfZhmjFqtnOK IOztygSP0XV9bzfJW42dTGdLIonzXVbFNHTWOVAIfP/MxcdIpI/nAwgPiQdp/0O2 Ks5fS8kKFm7Cm9cphIqNo8GKLda1yAoIGWqRSsJVBPH8/zU3hGQiiMP6XXr961Vs M6QuklZzkyvVjJKBTBE6mXU2NTO60/28IXAeolKqtgiYFj/EDwZ46Dr8ML7MXG6A VwNx/0JQSA7Xyf9CuneN9/fewuvVe6Z1a+2IY8v1pXLprgmBBCCoDopisAmRjfeG p1vahrHHVrDu359EiytHXYFms3cYSj4LlAYIPk1XpAHTrFizuk8PUV5oiiu+ug33 /yXJDTh40oJ4GFvH5OFrEvb3AhWzshXgfcKsmiXVPR7iX4FW+bm2m8qaJ7ZHWctX ZcP3dlyec0YafuCLnsGNDF0szQIzTWHXp42J581vyVekRqs2DPiQX/Lv4kLGt3zb O23O/JPYy64FWEEtX6BhCaq+HM7YjosGZmYXoubIUe1xQW+qVHyrdOQM6Ts+Qzh+ te5UTQIDAQABo4ICbjCCAmowDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ+2yxxVqgu RUe0snqLRu6AS+KLKTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s ZXRzZW5jcnlwdC5vcmcvMCUGA1UdEQQeMByCCmNvc3Rlby5hcHCCDnd3dy5jb3N0 ZW8uYXBwMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHW eQIEAgSB9ASB8QDvAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4A AAFvyVzDkwAABAMARjBEAiBtNZ8Q3GxpWWDmFA+dYhpIh+YoafKEStiMlJebrtdN mwIgJEGJ+EJYk2NSkFPYbcVmIyg8LL/E/4Ps6QTJROLYBp8AdgDwlaRZ8gDRgkAQ LS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAW/JXMW6AAAEAwBHMEUCIQD5DdRUHnZF A8mLOiVc1D9YWUY7RKuSQ4DPgKEx1YMLxAIgX6kESdVO8KuBzsD29Ym//f/q91NJ H47+t4pp54YdBT8wDQYJKoZIhvcNAQELBQADggEBAHNrMsz+aWQRaL0/pYPlOoTo x6Bcm4a99dYZ9PW3z9jsPr+SSFS7VqQiydn4VXmSKIN7ysvhzErpPwjLYEmbRv5z /uyeb1gEQa7GFE3FeNCPlUPiEKxMpk4WwOb5wB1NFH0MP79gANybTO2Ny1ifPIvj KwftvXfuKVLPpUErfugLUdUD7Z9LhNg5QQzOlO4mvbwEevdM4v6HIaY/w3pdOgu4 eDulaYb1kQAs6v2MWpHT0xJEgMNWVL/uShygTzcOvPrlOSJK/hVezhim0QRHc+FO 0qG4Q9P10H9WCyaaEZKWIm355PtikNH6XJJR53JE3O7gFmSe4BruBgjhh0r6EyI= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAqGsE6OwtkzMjueWfzVy+ Neeb2+3sqmlGe90Te7t5G1a70PW8JlSDdQqC4smLXsAwRJGwl4B4y9717yhqBC1f fqOh2oL5iufeOkzffP3YFegTPrZq7EVcukGsJZnqhugyHSlNGPHJB2geyp7s0qfM XMc27hn2YZoxarZziiDs7coEj9F1fW83yVuNnUxnSyKJ811WxTR01jlQCHz/zMXH SKSP5wMID4kHaf9DtirOX0vJChZuwpvXKYSKjaPBii3WtcgKCBlqkUrCVQTx/P81 N4RkIojD+l16/etVbDOkLpJWc5Mr1YySgUwROpl1NjUzutP9vCFwHqJSqrYImBY/ xA8GeOg6/DC+zFxugFcDcf9CUEgO18n/Qrp3jff33sLr1XumdWvtiGPL9aVy6a4J gQQgqA6KYrAJkY33hqdb2oaxx1aw7t+fRIsrR12BZrN3GEo+C5QGCD5NV6QB06xY s7pPD1FeaIorvroN9/8lyQ04eNKCeBhbx+ThaxL29wIVs7IV4H3CrJol1T0e4l+B Vvm5tpvKmie2R1nLV2XD93ZcnnNGGn7gi57BjQxdLM0CM01h16eNiefNb8lXpEar Ngz4kF/y7+JCxrd82zttzvyT2MuuBVhBLV+gYQmqvhzO2I6LBmZmF6LmyFHtcUFv qlR8q3TkDOk7PkM4frXuVE0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 315764491060405392159621561713900445790605 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 17:28:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-20 17:28:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'costeo.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 687085672799437902877151276147570060385777039355571896313049619969112119422599239713565317026544558303732397844121586468520058686163680989703578928200648630494915810308929157835810440776986305490076768732924392854324709031657524780752111630966605341560582344888162488950322208291053755761960665168361283243625271387512003040530295143603925357887411180201772332507731037523317090892074517689431184319861358322602351924233109708062869777788478829583570765636288445151852502198585328208898276906776582787066294493028463105560708428409792510241946422675570484308173990359194961075070378637663647395572245061166699849814015466160538137442266097161895689767315166910437808769541531754181608394431935353781806080426289527777722954912814534182888002722617891779342569177292685809081071464593917310990727665989531091882622431054398575011766640271026303399960483928815000176615325531119898088121156105011824213144668540142727341035146355047790013437346261287820565659358104325282620788662600353471424800091688750187811701901267581823856799142162376831701431806890110733711736036417373310563304438618915544225155883459092650078498484544266693037225357579910816892397933032729112380251861426188797421560609847493919126248521366315363193861329997 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3edb2c7156a82e4547b4b27a8b46ee804be28b29 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'costeo.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.costeo.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016fc95cc393000004030046304402206d359f10dc6c695960e6140f9d621a4887e62869f2844ad88c94979baed74d9b0220244189f842589363529053d86dc56623283c2cbfc4ff83ece904c944e2d8069f007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016fc95cc5ba0000040300473045022100f90dd4541e764503c98b3a255cd43f5859463b44ab924380cf80a131d5830bc402205fa90449d54ef0ab81cec0f6f589bffdffeaf753491f8efeb78a69e7861d053f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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