archiviostoricoastronomia.unibo.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:39:41:70:39:ea:b2:5a:b8:97:98:3d:ea:d2:6b:47:6b:3a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=archiviostoricoastronomia.unibo.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:39:41:70:39:ea:b2:5a:b8:97:98:3d:ea:d2:6b:47:6b:3a
Serial Number (int): 280819935241440343232984089292058881649466
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:63:69:c6:6a:77:f1:05:98:ac:e3:07:a3:30:06:89:8b:3f:72:d8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:62:7d:01:20:df:3d:c0:cd:13:7a:f3:d3:15:f4:1e:24:aa:69:86
Fingerprint (sha256): 04:65:4b:52:64:25:36:f2:24:28:24:7e:cf:7e:21:76:a9:7d:69:26:0d:af:40:91:4f:cd:7c:8e:21:54:2e:65

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate archiviostoricoastronomia.unibo.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for archiviostoricoastronomia.unibo.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

archiviostoricoastronomia.unibo.it

Other certificates including the domain name unibo.it

(limited to 100 certificates)
intranet.cirsfid.unibo.it
www.virtlab.unibo.it
mail.sslmit.unibo.it
sol.unibo.it
tirocini.sslmit.unibo.it
projects.dharc.unibo.it
moodle2.bbs.unibo.it
gemma.dm.unibo.it
mail.sslmit.unibo.it
rehab.cs.unibo.it
cirsfid-web.cirsfid.unibo.it
rehab.cs.unibo.it
biocomp.unibo.it
uniboinlaurea.unibo.it
italmontaggi.com
smtpauth.almaweb.unibo.it
cs.unibo.it
wacky.sslmit.unibo.it
ulisse.unibo.it
ordini.bbs.unibo.it
gitlab.students.cs.unibo.it
idptest.unibo.it
economia.ei.unibo.it
rsddm.dm.unibo.it
projects.difa.unibo.it
ssl.cs.unibo.it
i2-ve139.ingce.unibo.it
calma.unibo.it
fsi-vpn.campusfc.unibo.it
dipsa.unibo.it
idp.unibo.it
ngs-ptl.unibo.it
wacoma.unibo.it
muwo1.unibo.it
wacoma.unibo.it
journals-staging.unibo.it
wacoma.unibo.it
fsi-applicativi.campusfc.unibo.it
tester.dm.unibo.it
uniboinlaurea.unibo.it
archiviostoricoastronomia.unibo.it
aif.difa.unibo.it
www.siam-is18.dm.unibo.it
projects.dharc.unibo.it
journals-test.unibo.it
www.siam-is18.dm.unibo.it
tw.cs.unibo.it
hippy.ing.unibo.it
tester.dm.unibo.it
agora.unibo.it
etabeta.ing.unibo.it
apps.difa.unibo.it
vdesktop1.unibo.it
i2-ve139.ingce.unibo.it
www.bbs.unibo.it
athenamusica.dar.unibo.it
solaps.cib.unibo.it
micrel-web-services.dei.unibo.it
moodle2.bbs.unibo.it
gbm.difa.unibo.it
www.siam-is18.dm.unibo.it
wor.dar.unibo.it
aif.difa.unibo.it
vision.disi.unibo.it
cs.unibo.it
icinga.unibo.it
internal.crm.unibo.it
athenamusica.dar.unibo.it
moodle.sslmit.unibo.it
bilo.sslmit.unibo.it
i2-ve139.ingce.unibo.it
archiviostoricoastronomia.unibo.it
cle2.unibo.it
www.sincem.unibo.it
lists.cs.unibo.it
campus.cib.unibo.it
shib.unibo.it
csi-vpn.campusfc.unibo.it
zonemoda.unibo.it
archiviostoricoastronomia.unibo.it
globalmba-infokit.bbs.unibo.it
wacoma.unibo.it
ssl.cs.unibo.it
oraliter.sslmit.unibo.it
wacoma.unibo.it
motorsport.unibo.it
aif.difa.unibo.it
oval.edu.unibo.it
home.sslmit.unibo.it
dropbox.ing.unibo.it
uniboimmagine.unibo.it
celebrity.dar.unibo.it
vpn.unibo.it
journals-staging.unibo.it
toth.sslmit.unibo.it
aif.difa.unibo.it
proxyssl.unibo.it
bugx.ing.unibo.it
rpr.aric.unibo.it
aricintra.unibo.it

Certificate

The complete raw certificate details for archiviostoricoastronomia.unibo.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280819935241440343232984089292058881649466
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-22 01:02:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-23 01:02:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'archiviostoricoastronomia.unibo.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 829307440292025544097075501349136078704949214091250340596756630698714249035056611093933577612467546298683366408178844375869220364811109279586798499926729250797578944550306461918000819454334384176162550623762075469847886276257013179786769997477547081450258863882196710108643694825018004165563846560339307145265919488827898550821340334262572864140644173148724903267223496756198866968266276762603057428784368704015237137354918375415860866861940337556178891652295925714800865398528892343094953085853550103480143651237283020991331985153369080840411781285401814363613253982966591543619364181982576877763676079826380739528885028077836925763077147171470383092580106927019356106488665727786735615839432672026295925566010430739047255557662506557182519455313796132565245424221283659119988792568475340008242356976353139106534369957616854544265089364477640344519261173318859831053598102962947352480880394917327197108769126869061064395861584193287172873540973458541151455339500260898455419931592640559959701763387897318062282779105963204203406966335310050927478085322325704872276824256884906741739721299063830016533282857909062515639087727203531142676930776819832619640031123675574676611708823233100148086606885981523368660404491153049192598399413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							616369c66a77f10598ace307a33006898b3f72d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'archiviostoricoastronomia.unibo.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0027a89f826cfec48d8f36272013c3648ab2c299155d324bb4796c065079fb178879cb666c63099886fbd61e3b57c43f53c716f354980eef85a0b01a47b771354b5a66657f2ae8bcbaf5015d07822be48b8ee52fa707529bc53ed3827e082bccf3b60c214fa126f607103e67e0a0a1c50f6b2fc63780740824bb66800323ff499f133fe48a4c0035f87bd5d5cd39b3b33251f488c584934554998fa5057ec7d7eb9a72f4ed938668a471b47fb18ce3982613f2497ccc1d93a7c08ed59d7fe77d504d269d879d2d763349df2f11aafd5f2738a8340d19fead57ae5e9de0bba8f4fdd75c8e422e06c62e2b5772ed8fee8d6d87168adbf2ab8dc27195d92193ad73b5