italmontaggi.com

Issued by R3

About this certificate

This digital certificate with serial number 03:49:ea:ea:3a:c2:45:f9:5c:30:36:a3:10:26:d5:15:cc:9b was issued on by Let's Encrypt.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=italmontaggi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:ea:ea:3a:c2:45:f9:5c:30:36:a3:10:26:d5:15:cc:9b
Serial Number (int): 286489726120759491699740631920661956512923
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 44:07:90:36:96:5d:32:4a:8f:1c:ae:3e:dc:d5:3a:80:3b:fc:a0:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 52:c1:ef:53:ff:c1:b5:8e:73:d2:a5:6f:fc:33:25:5a:19:38:8d:fd
Fingerprint (sha256): 01:d8:a6:3e:03:53:77:1d:ba:13:f2:f5:c2:48:af:0b:d1:b4:fb:09:f5:e1:41:97:84:13:9f:a6:75:a0:31:9c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate italmontaggi.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for italmontaggi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cle.unibo.it
cleca.unibo.it
italmontaggi.com
www.cle.unibo.it
www.italmontaggi.com

Other certificates including the domain name italmontaggi.com

(limited to 100 certificates)
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com
italmontaggi.com

Certificate

The complete raw certificate details for italmontaggi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286489726120759491699740631920661956512923
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 22:41:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-15 22:41:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'italmontaggi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 707727558862498910029089978520765474306617102175875410181110227523147687456848220459289320042621113206687324834726102761369165670678213544789488547294193314046218925206018890042504002970835356445835300691053567855253793158877835858780899276947652470312902793076327716612457540260805953740351356919004705497167318512032706999961589214572433600801089958041797036643331769944903442447298277051796523296210607226917924347629429820826135492589452025967337131353529883573382691563166724204373272445115124790396594099996946758206928018088530763434303709786423337033450538351800368748009758132235942254895822413921179557721097494923585543286138526939341821801571131545911190780676920968336416101926709933522739040818197061905260392307529840184888093703578669157856908552765134424053306906349278087433533813872855503245682097357322221120777696336164432231549514995347238100583611155134147795956848323872679249321850075337250555529713338075529917018032069181281852324046601581298794304992696940276391836168359144251080748031097672552166796142970240893718993147242380688335057703834407280655288861663675656585420431804887394648848907104057765891337766162262691908035585241366626880263250472759127560632349551092668983844998025135461855445130717
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44079036965d324a8f1cae3edcd53a803bfca05a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cle.unibo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cleca.unibo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'italmontaggi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cle.unibo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.italmontaggi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d14a734d2000004030046304402200ebd2d8b975b458dabb44a9db87cf080271ebf2af0fe8bf846a6e9c9ef2226cc022070cbf841e4b9a5380b9987d0b8820d74e6510e451e8f99fe870415df8a27ad8400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d14a736bd00000403004730450220276be07654848a191f418a5090066d5aa33509f79e3af0aa3b90d8ae4ffb0aeb022100851576e29eed714d8fb854a3f6f7588f98e306a589d2d6649ee95dc2325a11eb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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