cgcassia.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1a:c1:51:c1:c3:9e:f9:17:7d:ef:a4:18:f5:9f:73:b2:d4 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

cgcassia.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1a:c1:51:c1:c3:9e:f9:17:7d:ef:a4:18:f5:9f:73:b2:d4
Serial Number (int): 270441164844460915034500118319274319393492
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:87:96:9b:cc:9f:4f:34:51:07:65:bf:99:53:a0:78:c3:d0:37:7c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 17:94:0c:ce:4f:06:9e:06:85:53:a7:bf:10:08:cc:e8:fc:9f:b7:07
Fingerprint (sha256): 00:0d:7f:16:e4:ef:cb:e5:33:78:a6:20:9d:6b:b3:ee:f0:f6:5d:97:b3:c1:31:68:6c:5e:c1:3d:ac:f7:94:17

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate cgcassia.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cgcassia.it


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cgcassia.it
www.cgcassia.it

Certificate

The complete raw certificate details for cgcassia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270441164844460915034500118319274319393492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-05 11:52:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-03 11:52:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cgcassia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 896101370207446016599752346918292917451905483030553087973730076237477483127573303507498888541407971377798505319507839655179206277561143605400206072948844221601698816117783459269040121365587213695079079346430251446751647332480267244247255609111725162028082556412710276023971034172063151173252212470831281307465491425521126151681940102863847794541678551384648906588981117024063059047381859126256378037196349374348662888692307475233391298517838591335984905851085052866704311937736656385751834041398132849595817284018476654590943489586912156125435769478818905698054410973912434214217386565305494146616148128228485737841471288709952305635389860620665643719413469490065868037511407588969701370269425356235317203176657277078544312937575962661681158351895697043520022354882287001654485209043068231410677165500100549004459843183208517636190937907950486638691640883066168683400971744391376655456328601739018367659978018808784836039729155437756527441774404991325391868513067432842081189657080467124726752364817145413498384815451406035264693083643944501801066001912725740060498420383161192266132504380380788781825889316774672941255470343853372486051026587023502241400143387135294534099869190053770609462978636125751200832540497060102858229816501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8587969bcc9f4f34510765bf9953a078c3d0377c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cgcassia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cgcassia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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