buongiorno.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ae:bf:2f:4b:3b:6e:b1:24:5e:68:d7:0d:fa:64:7b:00:02 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=buongiorno.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ae:bf:2f:4b:3b:6e:b1:24:5e:68:d7:0d:fa:64:7b:00:02
Serial Number (int): 320800117750560742016036087592058204389378
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f8:dd:94:03:c8:ec:48:30:5e:c5:35:eb:34:36:60:34:f4:a4:05:8d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:f0:a7:5b:a6:47:fe:62:d8:f6:b5:fb:49:f6:8e:01:d7:91:93:ee
Fingerprint (sha256): f0:ed:b3:2c:74:8f:2e:6b:5f:84:e5:0c:97:e3:ab:f6:01:1c:11:75:e9:75:9e:fc:8a:57:00:bb:4c:33:4c:f3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate buongiorno.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for buongiorno.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

buongiorno.co

Other certificates including the domain name buongiorno.co

(limited to 100 certificates)
www.buongiorno.co
minion.baby
buongiorno.co
www.buongiorno.co
presenceasjoy.com
www.buongiorno.co
www.buongiorno.co
buongiorno.co
wiatz.com
buongiorno.co
www.spoleto.co
buongiorno.co
buongiorno.co
www.buongiorno.co
buongiorno.co
buongiorno.co
www.buongiorno.co
trezzanosulnaviglio.org

Certificate

The complete raw certificate details for buongiorno.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 320800117750560742016036087592058204389378
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 02:27:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-07 02:27:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'buongiorno.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 789282414403801551149477684828614091094133142467898069402999010298985848036225681683923956296461957746521787345276807031382401992386270680729346524180355367794481026442857560158047506203230748405532401465423233827013673367994923490684987045789689939671946455525258494690548581175163870223817681897965354170126645056710978600615470618560202720978003745983715471417839491653963626354615582552859287913371698854310334669504509562717219614151831491059158875108280073901577696436997888628577503653417792369740543439674128706636206323431483141749993336348264267100594995008340539894537560254356827434869655471378026816745813160585500599298105142021490349259791132949115294807501551478756813384224160451655730814717081410842530902129748115786296348879621121136777868576446160052380337250873589048871572010411313167091614886889972419423427815747262747940486929991580508430048797804916036790936796290859202400801980059926132126085348192071245220751898245893179357193641739013766643137062934817507004535004096677561621453810580352624689583354708841688383825280932034661471270738776615800828303920408126383656976507218010075212643807115494918358067083338694148835159941658866891997785863478645515639660815762887221703074304410573294463361744107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8dd9403c8ec48305ec535eb34366034f4a4058d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buongiorno.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017157d45ec400000403004630440220316299b111cd3b022151521373cf01c95d22f44d146a028a0aa3b60405fe99b602207594ed666711e80b1b230a6b5327cb1ea227ef0a88e7a6f35a25cee9d1e1338800760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017157d45ec300000403004730450220676f7da21f2f3aeca03312436072db9538ab7ac469ec86fb5d0ba73e9c092b7d022100f1f130ea905b0dcb9e764f387e2759f855143fc87aa50554afe35618e20e1753
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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