braguglia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ba:d7:aa:ff:98:37:96:0e:54:72:25:c2:4f:12:64:0a:f3 was issued on by Let's Encrypt.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=braguglia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:d7:aa:ff:98:37:96:0e:54:72:25:c2:4f:12:64:0a:f3
Serial Number (int): 324916049936209334692858680242472906656499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:8a:22:d2:d1:f7:f8:b7:61:61:37:aa:24:3d:4f:16:e5:eb:92:a6
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c8:1c:19:12:db:3b:ed:de:5e:74:5b:e0:18:51:0d:8d:5c:c8:43:6b
Fingerprint (sha256): 00:c8:3b:17:cd:f6:5e:fc:1d:5c:e0:bd:34:d1:4f:b3:8b:7f:c2:1e:85:38:30:a6:f6:98:fe:72:b0:5d:c2:dd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate braguglia.org

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for braguglia.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autodiscover.braguglia.org
autodiscover.phoenixsea.ch
braguglia-org.phoenixsea.ch
braguglia.org
cpanel.braguglia.org
cpanel.phoenixsea.ch
mail.braguglia.org
mail.phoenixsea.ch
phoenixsea.ch
webdisk.braguglia.org
webdisk.phoenixsea.ch
webmail.braguglia.org
webmail.phoenixsea.ch
www.braguglia-org.phoenixsea.ch
www.braguglia.org
www.phoenixsea.ch

Other certificates including the domain name braguglia.org

(limited to 100 certificates)
braguglia.org
braguglia.ch
braguglia.ch
braguglia.ch
braguglia-org.braguglia.on-rev.com
braguglia.org
braguglia.ch
braguglia.org
www.braguglia.org
braguglia.org
phoenixsea.ch
braguglia.ch
braguglia.ch

Certificate

The complete raw certificate details for braguglia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7zY1v0fsKp9OgXohDHS
m/jzPGpDeNKyqbzv9SfqLXul/LBM8uX9wXMnJM5hOKu8T/e3Quc0FN2S13SpbJVB
LA9KUb3xMoVB+Wez3aODE97VC9NWAqYBSc+FkmcugSoci+OAO4RZrhz3GWptc9o7
PA7jp8Q6zUQrD0NYstBB2knsydhc4CFneNGUMBjy+yzoZvJmGEvw+e5hHmXRRu++
J791aGqeYcT12TvWIhsm9LzhnNOnHPPmqFxTCHVwMniNBxdb8q5cXJnDcYV6NN61
hiFHrrlrNXHctScg1UwengTcMj8ahZM1frt8eRsmnZM3gJvLu4nlr52MQ89nWuds
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324916049936209334692858680242472906656499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-11 09:24:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-09 09:24:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'braguglia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20669967650968261790120286385194818241858229176976852253074012003786073157519597374628596526913605645173689994329014854172761563751138070272317382893821929351468831392331738645541809563735770195134944143553577903510873114036537647408287636226511168553786562308650931698787967172487457675969759734698814395453995020623363214973991319562211566054463602682280374258133489297909468540867584303943143744399249687369557007901665230595867734643659940331668079051502260629300432607573585874952012253103101289132272900296263132934195382925100454704538518976809772163266013085296172604580075477834837660518674644812769117301797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							248a22d2d1f7f8b7616137aa243d4f16e5eb92a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braguglia-org.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdisk.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braguglia-org.phoenixsea.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.braguglia.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsea.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c8035a9110000040300473045022100c243e582b8d5f67f41e2fa334e4d319cebebbcb6cf74d65af7e4a7e9ce51d1d5022037d51d94a4754b0bdaf41ca1c23d9533f91e849b3d124bf7e8e1fdcd34b66d8500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c8035a91000000403004730450220626878077cac043b81bfce99576ea398231f81eca78214183c504c7775be3039022100aa9c5e68d0a554da6dc24cdef6f803e87ece2fe15da2523aa46a3d105e1e2b36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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