sinistraperravenna.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3d:f4:87:db:c2:35:b3:07:2b:eb:a6:5b:fb:e7:ba:ee:32 was issued on by Let's Encrypt.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sinistraperravenna.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3d:f4:87:db:c2:35:b3:07:2b:eb:a6:5b:fb:e7:ba:ee:32
Serial Number (int): 282419119225739993750448032481348496846386
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:e7:d6:68:83:6b:47:77:27:47:30:be:df:21:91:8f:38:01:77:f9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ad:3d:f0:96:b0:da:da:17:72:3b:55:93:a6:4d:e9:31:e7:ce:c1:56
Fingerprint (sha256): 00:17:ca:67:83:72:e5:08:64:d0:e8:93:9c:0d:b7:a9:cc:6a:b1:e4:33:fb:d4:8f:e0:e2:77:1f:72:9d:16:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sinistraperravenna.it

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sinistraperravenna.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpanel.sinistraperravenna.it
mail.sinistraperravenna.it
sinistraperravenna.it
webdisk.sinistraperravenna.it
webmail.sinistraperravenna.it
www.sinistraperravenna.it

Other certificates including the domain name sinistraperravenna.it

(limited to 100 certificates)
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
sinistraperravenna.it
www.sinistraperravenna.it

Certificate

The complete raw certificate details for sinistraperravenna.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkzx1oIWl/JPK6dQlMpE
NsVq002yYvIiPMEOopdKAfoYoa7vNguhopwXSooyIwY5k9H7Jh6adRqsEQwMZaJF
0cu0KWADT6yovbAUkk+RhMtz6VC0jX0FkqGAqdTGqdIACmu2hHnQN0A0P6ZXMbZh
kUUmt1sCLA4mg0DaO8f9K76OjRZF+OEccbeuzJ4bQp5DtYgDR89N3jS9DS9sKxr0
/k/aeuXcRVIka/c+u887udcoNaDU/5WcOQfM5ju06PU2ylU9s+aKl7MWscuvKOu2
H0b05c/0fXyhd/bI7HR8qiFzEXYlAQcjj1VIm9syzSj+fb39dXPMsgLQDFr3I2hP
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282419119225739993750448032481348496846386
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-21 02:27:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-20 02:27:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sinistraperravenna.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24023220779104592722696690770128121776683165915583579621613091260607585172752045490338147276925671777291381012372259465546985824823863389354752508216239425738654694158645213905863106392559773820886992017682967699634350308632890291645832397444006187009593841497583808943002400485501865349967194298906012663252862400918878152414933026571904741883903320842351939084240874899260207486244597682975251474463284946622633665759446387246122357890871987502772757907474823953186424227911350309517167187211100955964062374525752623082215193047302544708597865721648999744927837232661058579772428177422541475961536482002363082100701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55e7d668836b4777274730bedf21918f380177f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.sinistraperravenna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sinistraperravenna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sinistraperravenna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.sinistraperravenna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.sinistraperravenna.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sinistraperravenna.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000162e63e1e380000040300483046022100d4ad52951390aadcd485a71cf96f27525d9e66bf933daf9a516c120ea19ecac6022100b83adbdf2eabbd07bcae99baebad589c87adbe7a355ccade2579ff084adc5e6f007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000162e63e1e4900000403004730450221008cc1d0df1effa539795d874c4d47d03567912b9c3ebcb23222541ce57866df93022061fcf69a1116fc0e49e5893cfc128822d32f6461d827d853e98f3d2bf9f7097e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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