lorenza.co

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:bd:d5:41:81:57:1f:bc:1e:c2:56:66:2c:31:a1:6f:ee:50 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lorenza.co

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:d5:41:81:57:1f:bc:1e:c2:56:66:2c:31:a1:6f:ee:50
Serial Number (int): 325933690829069611847594784554067912814160
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:69:b5:59:4a:5f:7b:c7:4b:9b:cd:c3:18:8f:af:3d:b7:3e:00:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b9:16:dc:9d:d8:9c:5c:07:f8:e2:9b:7b:87:25:5f:f4:75:a5:16:ca
Fingerprint (sha256): f1:22:ef:8c:83:96:9d:11:9c:2c:e6:85:9a:34:dd:94:7f:8b:e0:43:ea:86:01:5f:9c:05:fd:58:91:59:a9:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lorenza.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lorenza.co

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lorenza.co

Other certificates including the domain name lorenza.co

(limited to 100 certificates)

Certificate

The complete raw certificate details for lorenza.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325933690829069611847594784554067912814160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 21:02:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 21:02:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lorenza.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 918980248164283527918781024339127858548664107384713331592884607258327914389592636199761244917100443274326546717906081204735374365123684634684741889830967628905508885540985206714112938157035036179667886485013697376050358299322725998718336763617513901553857492733640885097860752581380926659135337316081609319415164047998791298916518735923254942337174784990114854612729105909255826542749257804351394043786927797281835607064166458604921290387197058738005199434696186905806584429703683120352421668017102079085994590738146570782096654362616769493637814584194944037669201136080792270348320369252780230285361085512018769827425763510620993078837173025569113398027227720046817802902753362103140149876455307244432884974882775495852646444728625750891305883590150466452427769035055082821950809388098901789264877672924101712717582318884578165331225926069728205030296271764827743389925516485011733073849839101844407481774987469912696833803850643505920636399919535809387595314908189857594036935751789613454026762837129070138060970404183749785987845107683771763885110493268776889553064199178118221707327545128218065351801465374470712440184363912044893072957537661943962604088295463762941728265639396985338927453667984771942642420821386909450541444467
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2869b5594a5f7bc74b9bcdc3188faf3db73e00c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lorenza.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3a9ae5660000040300483046022100cf7407bb579f953149213f4469a82b7adbf1183a344e53f338824c27dfb94aec022100aef2472c45b9f6c5ab44df7afa7487fe6adaaa640f3a25a2bc1ff0ad8e6d4f4b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3a9ae594000004030047304502201045c2b6442f0428f500b247078615bf49030030c5c620e2d94178c83fb6cee5022100a362d8c0221e59deb422af3242d1d814c84ef724ee821764cfad723da1e10c86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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