lettura.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:45:d0:00:72:1e:0c:e8:db:9d:87:73:f1:71:b4:a9:04:99 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lettura.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:d0:00:72:1e:0c:e8:db:9d:87:73:f1:71:b4:a9:04:99
Serial Number (int): 285092822850524291440139062459827306955929
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:6b:8d:ad:61:96:2d:9b:dc:83:65:33:a2:4c:1d:76:1f:c3:82:c9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d4:28:86:23:a8:4e:a5:bd:b5:2c:3b:a2:39:63:a1:62:f7:1a:6b:54
Fingerprint (sha256): 05:e4:b6:74:ed:da:fd:70:34:38:b0:ff:f6:3c:46:7d:fd:18:b3:fa:0d:24:54:e7:2f:a6:52:de:0d:8f:24:12

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lettura.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lettura.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lettura.com

Other certificates including the domain name lettura.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for lettura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285092822850524291440139062459827306955929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-29 12:11:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 12:11:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lettura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760053915879645920344889671731734447911742097333417653688166739320550801136635113236623670843293182604578815858363814658599760258645107215488033307564565571041428213925139480584678635601524303698334015115339672835561870815712199327652586442897718499293063021595637327405145133925089795266329592481154044244679743387486923187457979559559808011261380780567173875766798028196257596983156306729827099550324618673738018062644899266349819051013873988064022090682535614952893501247134507693650961931016704991950166134809766839692102422441850552539374462516643892608348900782583900674588873761642016901905684478802524965647219290138710292292321845189507972462061142149578691841806194244552240384192234952346725164922990314084865244408541915939677179360658241629572268283509560284066845062477441976024654829056943109183168948978055890965499044733347670001519216594407171470373989661564870611815558192959300334207345208814666471571361035492656335651588728240190312129134749171318649986004715866350766221137576662630252528201080265200920384906266990487480498127971561648624845991138198241363257993234375321073898986157651776472085042161290250710281523765196967940240306070738231264504260390065005373557547962602261798854739614068423732805386089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							396b8dad61962d9bdc836533a24c1d761fc382c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lettura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016eb749e8ae0000040300473045022100dd2f3f8e699e93ec1ea678a2812df77c8195a122dc7bf711ca69404d8ec204ba022079e731770aa68e6e251efc620c79eea60a325e154c6ac1895d47a5e5ff71878100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016eb749e8fd0000040300463044022011270f02fd889cbf221d224317b8cae9145e3eac4d54336aee9c53b82ff54fb302204bbd8a6139c7b1dc344b677fbbdfe076eae49fefe45c1dbcf914f5978d8baa1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004ea2788d87343d686d86178d1a4878e55744f9ffd02be5b47b9bd40123db1448d0002f4017bdf6b25f7796b97a1d6b1287ce571de7dc456ca4088512389cba1c471a05c27115897afc160e6c3ee4af51fc34428b570052d76b6a51a753c116919bc1baf0b44bd915781ed47c22c825c6b64bef88dfbec9b4a3657e54e5a3fe237d4acb5df04f5983e3ceca6f82a8042647cee5df6c40f96f9d9f5c450e4fb373fc496dbbe1a94bbd2164c071e28c6ec9fd801d3b16c0b9d0356a9ec2a424ad439077ed68791875ef02cfbb543cdcfd530bb04ffa1cf60e05d6b43db976feee0befa4525b15a2505f972c0cad24d000870084290103fc8b28b0c8ca54eeba64dc