www.sanpietroinlama.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c2:6b:83:0b:da:3c:eb:42:01:37:c3:7c:34:0b:54:cd:9a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sanpietroinlama.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c2:6b:83:0b:da:3c:eb:42:01:37:c3:7c:34:0b:54:cd:9a
Serial Number (int): 327494544804777354490719960405947840777626
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:9d:13:0f:a4:5f:a4:8f:26:eb:17:bc:1e:f9:d7:58:57:26:43:6e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:ba:26:f0:51:24:75:8d:89:f8:9e:5c:5c:ca:b1:42:0b:11:a0:87
Fingerprint (sha256): 03:0f:a0:e9:47:35:a0:03:f8:7e:c4:b4:97:e3:16:97:04:a3:10:7f:d6:a7:58:d0:0e:fb:11:c0:86:16:19:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sanpietroinlama.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sanpietroinlama.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.sanpietroinlama.com

Other certificates including the domain name sanpietroinlama.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.sanpietroinlama.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327494544804777354490719960405947840777626
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 09:59:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 09:59:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sanpietroinlama.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760295740236917991224979246032864853774518779988427355526299066809756261008489027529431532438787043160584666581165799680590790098191352143618991436683266673095221995507258913141657012262104075262180732558108911585083366292239375763596656377349880552676843583816434187308667182591920221000292187576969836172961600681713186623102161120417430665144873141596333792100475082128998194381360857929485621330230573484082364916945402413277843139946797582399693325363086813165216257960754777914485660458788553003448084699510004757849086136750371332741365936304760955390121069383322142213685388080817939236131489079551135703494016640447448843514386676739156412819700395897348883184748542370078200282539927576191987003015524653399598782410469371351971970428827084082298303419119868333641164298932974585558829492611725236834462955448514682056295401070634617966708164359329696215107320148176182680300852571862439062299886600013752627136339785454899184225649200167417155931475428049332606525229373732446450702815305005741374475054864175777955359047658419541074565894897481454055363843836648394786314057490427334493785611555508092149562745836338032375117679579255771950254649326641186076324839872732697440090347565774774346491231737962984718195507959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							489d130fa45fa48f26eb17bc1ef9d7585726436e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanpietroinlama.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016af8f1ce29000004030046304402200e88a413bc75d301feea2b70d0256eba598368c8319838ecdd522662942e094102207c7660608f8b7cd0d5da27fdb542c9b72f925dab19428c77e05e15494ba88cd2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af8f1cd650000040300473045022100a27085e93b6a7202a3c4b224f5a046dca89621cb0218aa20b187f9d0f26402c902205881faa603efdfa74db449d0eaad9decc62a472fa92cc083ca91e99a1becd3df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c573db28a8077fdf38819a0c1eadf1c754779731618f21c441283284f79c036564c7707344ef323e9822cbb217a5bb7db5809fc60086d9f5d8e9e6e62c800394c13d0db9b2520c78a0cb401371deb8b2d267dc4a53cc3e64900f8f77f074b6dc681c4fdbeab0c4f11fb8490bc695d4c7280a5fc5ff2da0a78ef1364d3e784f88439d283504908eb0b9f557ad8dd151b34df0250e78437867161e2ca5a81a933609bc159e2c6b68fcef30e74edf401c359bb5415f7069c835afd72f1bb743530a07f8923e4618e3c481e462dfffb94df9600298b501ee95920922d7b9d90e41d9f302185453bdf484fd44facf793da63e0e75226a5d2eace0fff4f3140bb2c85