www.riservati.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:91:8d:3f:89:c9:bc:3f:a8:2b:4f:96:28:04:fc:49:1a:1c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.riservati.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:91:8d:3f:89:c9:bc:3f:a8:2b:4f:96:28:04:fc:49:1a:1c
Serial Number (int): 310865552055597814478256593266053959195164
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a0:46:d5:2e:71:4f:b1:e0:8b:45:48:48:64:d5:8b:f3:8e:af:5e:51
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 81:a9:82:6c:54:c0:c2:43:57:1c:d6:d4:d7:2f:b0:c6:7a:b6:80:ec
Fingerprint (sha256): 00:af:92:d0:33:3b:14:fe:c4:94:0f:c3:d4:72:5a:a4:80:61:1f:df:c0:3b:82:b5:84:9e:f7:59:de:e4:8d:60

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.riservati.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.riservati.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.riservati.net

Other certificates including the domain name riservati.net

(limited to 100 certificates)
riservati.net
www.riservati.net
www.riservati.net
www.riservati.net
riservati.net
www.riservati.net
riservati.net
riservati.net
riservati.net
riservati.net
www.riservati.net
www.riservati.net
riservati.net
riservati.net
riservati.net
riservati.net

Certificate

The complete raw certificate details for www.riservati.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 310865552055597814478256593266053959195164
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-29 00:12:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-27 00:12:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.riservati.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 771144621296570476450578214320277329495989122450636819215514952580125518235952496393790991360703404526486508704809954135210244298858075865765207956409301083036015887963279009243740596965666885496383836353026730270562201007374085902221413933804068931089692894479049267621770836424231427875483941016856105782521051016261416162754628402630945529733015529299339198294450209043282663959653292803464871502185560777246583928073875962584803608878465786753648374017705624743878099136603189718392547431116369395720166673121166328355003084806253872449647962071193680134754685193857049788580342792463064978137116372768026414227980708665024665715175570599982756863381593825382401923279597834911990991042967655004842240862735569168385537198647123299817897811748006069384248993925028200186646877250569450819317548507350512432265820885501314056047373222282852631886851083882586295498657154558515636277990123549291714290063536206091931574198244176107296286841324504209439974631874708409927891166443599660097852273894891747757283118753326755319766493069013622656824112733157055070039427730899620797876515671629707555430952961046827445256060403139027860876377494263485671690096071914842503536575617900507872266146207421324663177896340432206886467630791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a046d52e714fb1e08b45484864d58bf38eaf5e51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riservati.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cdaee1c4e00000403004830460221008e5495a90e3b5bdb34d4781474f222915d1e5d57a4ac82307b7e6456c76461da022100e304b41dcb9648ff09eeffb41d8b758d82e59cdff988b9df480b707fee032afe00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cdaee1c3c0000040300473045022077b838f802fca54f94d9ca13bd62d6be23c2373595e67999eaac5649d0cb6dc3022100f1b89aea6e0918866f98e4e9aba628ca5a30a59217f983004765cade71799d29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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