cossato.com

Issued by R3

About this certificate

This digital certificate with serial number 03:41:b4:e6:f0:72:d7:9a:28:5f:da:d1:37:0b:80:96:f3:2e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cossato.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:b4:e6:f0:72:d7:9a:28:5f:da:d1:37:0b:80:96:f3:2e
Serial Number (int): 283695671789537528977846008797423312761646
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 15:e6:5a:5f:c9:91:59:db:1f:f1:fe:23:fd:4f:23:59:1e:39:ab:78
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 23:7d:3c:d2:92:f7:80:2d:aa:29:c7:b8:4d:d3:31:af:16:4b:83:51
Fingerprint (sha256): f5:62:e1:b7:a4:41:41:32:fc:39:9a:61:69:07:18:b3:d1:cd:6e:ad:d8:7b:4a:52:85:ec:9b:0f:ef:46:6c:9d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate cossato.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cossato.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cossato.com

Other certificates including the domain name cossato.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for cossato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283695671789537528977846008797423312761646
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 15:13:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 15:13:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cossato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 728298876325324216608919558052654250658628024501589135453824907258411577577627915902657107663143419899145780360440403183977592284052137594041015398383722958099197616284020270786940611716050178437598175415354746689803438504942493272544858515941898553423065963523368700482558163849287621987999176364748245820504433326103227402652795542013397981627932449276317017531983468082574103655959107869743464332308040127169891806466676711610215443191960518304559748074800188677951912748576667661698033675151904440422062117784576756034471522583507789174055181119250664670479620072806236707267664606479164383296834190159211940455807423708894204765351257419579786913144100955833893647828444286900716069504990444971932402351481755169226637208324937201191629445876318382474067147877709912736019597922983045626020091078824541288455395671676441636505421813127052723999860723561712087707364714344811595661892173758503208826966974356333178047740615831512578905995188505404976033519063379384043915052626499390131129930685898943835309400228876256603124732415471053718673673101445941714534744745475403481663697072899379015788764224003560041709183455412659209465827780811678809067414321252379600642196762314615536629022345804449026220512172346608274710096909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15e65a5fc99159db1ff1fe23fd4f23591e39ab78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cossato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018abdab36860000040300483046022100d896db1cccc1ec551cb13a1c4573774d56e9ce423c78cac116bec2597eee1b55022100a5dcde8326740f7333a64dd018882f527d7b56655f6528a2230d8e0ac788526d007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018abdab36c9000004030047304502202ab8430b606bfaada91271523ce4d62bdfb0942694bb13924f4951d9d286778102210085b33e1a143eefe3644696c6c5662f89d818e7625374a55327ffe8e2e1d4bf34
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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