DV SSL/TLS Certificate for bbapochipassi.it

Certificate is witin its validity period

Issued by Let's Encrypt (R11)

About the bbapochipassi.it DV SSL/TLS Certificate

This certificate with serial number 06:e9:48:f3:48:d5:59:ac:3e:9e:10:7a:03:e5:98:9f:8c:c7 for bbapochipassi.it was issued on by Let's Encrypt.

With 4 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for bbapochipassi.it provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Let's Encrypt

Organization: Let's Encrypt
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:e9:48:f3:48:d5:59:ac:3e:9e:10:7a:03:e5:98:9f:8c:c7
Serial Number (int): 602056474704210122247948630192008181288135
Serial Number Length: 139 bits, 18 octets

Subject Key Identifier: b6:8f:ae:5e:ed:52:92:19:cb:a2:51:c9:10:10:74:b9:99:e2:9b:a5
Authority Key Identifier: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (SHA-1): 61:84:3d:3c:9f:b9:42:eb:bf:83:72:81:9d:31:d1:7f:5c:b6:2a:d8
Fingerprint (SHA-256): 52:b2:24:3a:ba:f9:bb:64:8f:46:ec:b8:23:d5:09:dc:ff:d3:54:ed:ee:24:e6:33:09:c8:1b:35:09:0a:d4:8b

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation Information

CRL Distribution Point: http://r11.c.lencr.org/72.crl

Check the revocation status for certificate bbapochipassi.it
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for bbapochipassi.it

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for bbapochipassi.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+MGwPW36zqmioV/P+6S
J/y2EXqpBI/Z7ABoyo4sZ95Tgyc22XxETQAxa9BJR8LAYuIAIiDkNz4ys+uCcm98
+YPaQQZU9nCygLlwJM/LcnxZW7et16Ave7ykqIhw+noAuyncQRMYLD6Nh+2zsv6j
79+l/sFoCpDlnoxre0qBWtgc4stjNZ8zpuIa0XGRJ7n3+28FW1TMT4sR8A3BX+qw
r2/6nanKfrSgTbMY37y6S/jFH72bs+LGIhlyoBEyW/kCM6KtbPtIPXoU/5lGIRcE
MEprSIZGPxWfLiYuiRK4g71zcfMzATUjgFf+yFE/VR1LpSR3q2yICLh/32fcM6Om
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 602056474704210122247948630192008181288135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-20 01:09:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-09-18 01:09:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bbapochipassi.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23718513910001529489487087827246141498500596385451507884364283688037223184702871860751958841709099592232622480173254511602634755329456787269111643020008270122810143514817766345831082751751407610842290902339515283559372966849129945028377629335123101436989563245548943207870532928240419910552933110776803242988339579636263023277431652529408023746323246843195789876758102282195399206720181282606350776819639269959069851053289494019405584367139223204131618931784179450491853954784943160991102417263141308330996734072006745561527595216089002449286076271646895504577099708032928192638193120853839724884202483132996073530881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b68fae5eed529219cba251c9101074b999e29ba5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbapochipassi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.bbapochipassi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.bbapochipassi.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbapochipassi.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.c.lencr.org/72.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077000de1f2302bd30dc140621209ea552efc47747cb1d7e930ef0e421eb47e4eaa34000001978b17bce6000004030048304602210098288b895c226286499dbd718a7bd47f313698ab529463593d444d3b2c35f3e1022100ceff153fb75c814713a14b74f2b54f51dc6abf66a223080a1b103f630757104b0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b8000001978b17bd07000004030046304402203b086696f6dd3fb6c97f4779f2b5a7b2e2c7cc5dd8b20845e416ee48db1dc3d102204f2146ec4b4d1c6df000a027eedfbbad821a7a0f9dfa2de23aa68d754bd482f0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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