DV SSL/TLS Certificate for epilessia.xagena.it

Certificate is witin its validity period

Issued by Let's Encrypt (R10)

About the epilessia.xagena.it DV SSL/TLS Certificate

This certificate with serial number 05:43:6a:79:5a:7f:d5:11:39:57:5e:cc:c5:53:e0:43:c1:c0 for epilessia.xagena.it was issued on by Let's Encrypt.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for epilessia.xagena.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:43:6a:79:5a:7f:d5:11:39:57:5e:cc:c5:53:e0:43:c1:c0
Serial Number (int): 458501876513521976179415828236685736657344
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: a2:4d:c2:76:0b:e3:f2:1e:87:bf:ce:0b:1f:9a:b9:c3:28:9f:34:5a
Authority Key Identifier: bb:bc:c3:47:a5:e4:bc:a9:c6:c3:a4:72:0c:10:8d:a2:35:e1:c8:e8

Fingerprint (SHA-1): ec:cb:b4:19:f8:8c:04:bc:3a:72:08:a7:50:34:12:ff:dc:3f:9d:cf
Fingerprint (SHA-256): a9:c4:27:54:27:dd:fb:1e:71:c8:b9:e5:9c:a2:dc:bb:05:be:6c:10:eb:77:d8:3b:33:89:ad:21:d3:04:0e:48

Issuing Certificate URL: http://r10.i.lencr.org/

Revocation Information

OCSP Server: http://r10.o.lencr.org
CRL Distribution Point: http://r10.c.lencr.org/65.crl

Check the revocation status for certificate epilessia.xagena.it
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for epilessia.xagena.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for epilessia.xagena.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjgWQPCv3fJpKNZ7lkh
Fyiy0Maf3M+XE8m5uDyjlmEM5fcwtOxCz7DJzTCYOcOcjjxA0QCOd87CXwYHT781
81KxYQpNA7YiJPXuKwWqozz2xTGvPi6qTDZMUY8sEVz+vjV/Ekx4wjZWX/JS9nE+
TuZurSiU+NK/q9pyJgFrXdPa0TSyH/u9CeQjydtElfkXjW7U4iKev8Cfi2XdSJxG
SYICzaxJX8HgcSztqSrQl1CeACL2x5K1DvwK7aqHRquV+lOsfAGaPs/NsSyaCIMo
OjkZaczokY6U90QiHQJNojxHimsru04nwQpUmDhGdZa9QxIzkcHBHXGABAR+0Yaz
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 458501876513521976179415828236685736657344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R10'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-04 19:23:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-08-02 19:23:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'epilessia.xagena.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24636626351894990889200977456730788193761502017078744578050803515011853350588537685386062026083751909671788085053151458313218248269298157554704262597908621980869148555213476666222461201202894446999144665970830197775101396855266777194397911885901657976774118294638851026396323827038210062291152950299685627499095394114289750664676089290809365548053613655129460875178755173879925528554926602758243590318258511915956893313772427094176627552234564230410646190369639421297456329704121515403532312684861454956025229393712407739922515335357259569705943685963881721207199812402414449933573792085449746365031826825381713195987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a24dc2760be3f21e87bfce0b1f9ab9c3289f345a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bbbcc347a5e4bca9c6c3a4720c108da235e1c8e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epilessia.xagena.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epilessia.xagena.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r10.c.lencr.org/65.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a442c506496061548f0fd4ea9cfb7a2d26454d87a97f2fdf4559f6274f3a8454000001969cf60949000004030046304402201b893afda0869bbf6f05dc4920a68bd59657ddd16e023bb4037c26f02328384a02205e5fcdb79228dc3e7eb6e6b43e3c9e0a0d9fad39d91903c59ebd32da2c7630110076001a04ff49d0541d40aff6a0c3bff1d8c4672f4eecee234068986b17402edc897d000001969cf60b7f000004030047304502206666f089220d5e9eac8a5a5e6e118b5722f8ac63e58ff213fc017f551de58a9b022100a4ffae1d5def58c83d9bef7b4f86c49ce1da6f9fd328e585e5101b408a76f69d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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