agrigento.co

Issued by R3

About this certificate

This digital certificate with serial number 04:57:21:b7:50:78:c1:ed:ea:96:c0:1e:64:00:bf:e5:53:f3 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=agrigento.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:57:21:b7:50:78:c1:ed:ea:96:c0:1e:64:00:bf:e5:53:f3
Serial Number (int): 378098525995508813029045770477708025091059
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4a:1d:17:ea:41:d2:2f:e1:b6:69:cc:b9:e5:82:1f:78:b3:ef:a1:b2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 74:bc:25:d7:e2:3b:7e:db:3a:cf:b6:ef:ea:3a:96:a4:6c:54:7d:41
Fingerprint (sha256): eb:14:d0:d1:f1:dc:6b:f0:fb:3d:0c:47:2a:2d:8c:52:02:42:46:f7:cb:e1:62:03:5c:6a:e3:2c:f9:38:54:1c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate agrigento.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agrigento.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agrigento.co

Other certificates including the domain name agrigento.co

(limited to 100 certificates)
agrigento.co
www.agrigento.co
www.agrigento.co
agrigento.co
westvirginiasportstherapy.com
www.agrigento.co
agrigento.co
agrigento.co
71206.com
www.agrigento.co
organictampons.in
agrigento.co
www.agrigento.co
agrigento.co
agrigento.co
www.agrigento.co

Certificate

The complete raw certificate details for agrigento.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 378098525995508813029045770477708025091059
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-02 05:12:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-02 05:12:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agrigento.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 719571444806301709494313040617788910203720290617540490411412580853165186280182554575064121392893195168043992341578345709082906782573379745892854983265105397115505533412059768927733129001327275406898439048500337145523467028133722553279658523171472886066559464336918628772370795828455180563021406920098784870392558769570682605818832391746354196273773212060162123946001377877589113331726727137246420393608417970119166931680431214489988040211156331749085382508306646689792569050179703847543083787805952995308001740324039903448898067652969366381474921845718172577854524550443972117764588842347063710707881280721494798050960867863405088862282692663760085201303381912034967109878587199254323628299456518208602619578422665502283657281092066885926137588475082295943583466094499379814301317678239149424844350641671963254421560734269904989852538763324397253185832650307256381858946570921555163070532051854422579297433492509045307036992074526643933937920474410553177830201404852966717071037419876325436504091837123776833178613758087935875333509322223338095708126171958468296373861254936394966927334003088790007387833601497739363506434636015536727168668691922119146491741794318096997057829991737224855268324984308512140814197390143097918955094071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a1d17ea41d22fe1b669ccb9e5821f78b3efa1b2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrigento.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d6872c6700000040300463044022068ae4a11fdd147c0bfc6901b41aa079b75d728e0759a3a16defe92a908d1235902203ae340208c2e6538626fcf99b2081b4bb0ee2201d36a73de5f3e795ccd9ccfdd007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d6872c6730000040300473045022100dcc4331e4cc0ba1419cccf9e75618614093e3c68048c7999a94062b7f133fb11022058c232869851e604520583fcfd1bc1b85abe8876b5911571936adac6bee56ffb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d8f227ce8d68c814ffb0e0ce460854386b8f395d3ff8dfffde8ebc3ddd71f7a00e8c0f20e27355a69c487aaa13811a58b6946075e382658d41ef51b77d10243cf6bbe43341613b3f23bc2e2bd7ce8f89a231aed178e33be55b77e942204f3a4d49bf4e16e4ef8b5a80a631acde37b5d423a68dd6f92c4b7dc7fc9e03173465465c578f59fe7d4ace5789b8e77f8baadedc7d1b7bd8fe8ab5880125e55650c3fc77f945dabd778019541512fbe565d94d05f37d8a9fe9b97b3acbd4370bd3479369bc8f2e867cde3cd7a9b4882ead6d832b3db40fad1441a923c527ee439d4bdc989a558e6a9730528642dac8e02f26b05d3663f70a248a3fa1b79ac9a0c8fed