www.salvagenti.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:fc:36:47:58:36:97:0e:c7:00:f8:16:d9:1e:f6:8a:76:72 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.salvagenti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:36:47:58:36:97:0e:c7:00:f8:16:d9:1e:f6:8a:76:72
Serial Number (int): 347160163013383690160871106880050763036274
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8d:ce:b6:66:d6:94:69:72:dd:c7:de:81:10:4d:48:cc:2d:96:23:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:7c:16:ee:2a:be:f1:f4:76:17:5d:47:9a:9c:16:26:87:9f:86:16
Fingerprint (sha256): 07:e1:19:88:f6:c0:9a:5c:14:e5:50:84:5d:d7:fa:29:b0:b2:f0:48:83:16:79:b9:7c:be:1a:34:fb:2e:0b:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.salvagenti.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.salvagenti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.salvagenti.com

Other certificates including the domain name salvagenti.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.salvagenti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgISA/w2R1g2lw7HAPgW2R72inZyMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjUwODA1MTdaFw0x
OTA4MjMwODA1MTdaMB0xGzAZBgNVBAMTEnd3dy5zYWx2YWdlbnRpLmNvbTCCAiIw
DQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAMurvgKeauAefF/Hx65puwbQqJHb
8mngZBKrwiNOmLiBPdZJ8blBsML4lN7L3UQJr+TRfodb76O9sVZ0uXI0V08VgTNs
OaqpRgIqRql2MAu7D38pir9KriEGcfYhzV+vv7Y3FbUPfpxAQmxtWhlqtFq8P1xz
0DlRSr8sMBYasxkIT24AFSzH2jrHeQz+WD4q2UZfk0FRoV8wp0PryNYg+E+wjdXI
hgWg3pERBlaeXVqgwQC0BEIgxL+d1sBUt2S8jbHAD+hsP5H67ujwgKKe79gFAgFC
MOmaNqQUP3vSl4utvaKR+Mb3BXuZN9iTzrEjYGekFt2Z2X3diJrTeQ/rg6CT6Meu
/a1Rr5vxZ/AqpfLOc58Vp8+Z3K9MxRC+kCbmA/tj0utMoxaWVoAUNcKjEzifMckN
oOcgzRTJrPUFStrJyh7oOPfyYFwokFl8ysU6jdr7ZllWWDyOJ089rNcnUp6tVfLP
0+SFUSoo2EI+a8Kdh/u+O7rNEqFQV89OzWwfErNv4BtCbNoAOiZxYjRseCpC8xeW
aZs7hFJDzraWEd06vif8610g1WK+7lgWcpEO+EPPYXRvZH5lpzXApQfZzAFfySHK
DspFrzyILwZ3RkPLWL+dcwSW7onf09xV/6tA6tQW29Krvztd626ovkYAjkxxblgG
ZIIKlsFMWpSovNYVAgMBAAGjggJlMIICYTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FI3OtmbWlGly3cfegRBNSMwtliMsMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wHQYDVR0RBBYwFIISd3d3LnNhbHZhZ2Vu
dGkuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYI
KwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAgYKKwYBBAHW
eQIEAgSB8wSB8ADuAHUAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMA
AAFq7jy3agAABAMARjBEAiAbq48Zyg3zlmgI9yCx6u4btmNEOk+quvLjhsy0Tl2u
DAIgcEeSirY9RPq2ErXjjIJ0VbjsZiNHigQBRjtCVvB++iEAdQBj8tvN6DvMLM8L
coQnV2szpI1hd4+9daY4scdoVEvYjQAAAWruPLgDAAAEAwBGMEQCIDbpP9E2OQ9/
IKUG3wqZLFAUug88Csy3PqXqucylX/EvAiBKPWHrvpnP2pzI4dByEPEVjWNjjWjQ
Mlp3XixlET7ZxjANBgkqhkiG9w0BAQsFAAOCAQEAKt/fAcLa6kTXLRhtFgNxFprH
2bUlWQ2e/BFHf8GCBxwTKvrH7b4Ho2+AzSN3/b/qUH9vfkFsmkBKjeNg5rdEawoP
y4/kW8+jMY9vygU+ffYhKZoNofmqkRR4oH0YNyyteEE0w2y4m99l8gooG0P/e7bX
vOH5pRhy08PTwXY/CaDYF0dtUjPkZX/YDDcz+kvdiA04nfSinjCWDw0nqJVfYlk/
28pNKLTcsOb52DJeQA/H2JVwXaaIp5eRP8fz34/cAVnXIV00UaF+K2ewwAgJuO28
pyQkUeM/mo+Ie+DWjzpNGjGCVq55oEEcw0LXb56OiVAVd18vNZ+YgckEuGw23w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347160163013383690160871106880050763036274
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 08:05:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 08:05:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.salvagenti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 830904648774826931333943935329527873662121613294174497973719466240699856827237219646011011986308106434743582948916998241320434690367562100845716068662833970133449201587262481547650996707399474232737897460786695295482139861926625236902669139131114563713790851855038125326322003875139104047918906616604804648621295719590553683503037570350442554776494187704828384438672594614535483340828466251175647448696812132926734858224656490883522407428844881798835037183914639424111267213863782958186844345895070613788021668507559152135554556830788859761917074725297606476788850568618493688963843481391214337384751232315750479866933786121894039128329300536958291315240084249419364733423090921832960057824411925294474524408819516195676642449889957077600246207692073642734850516839180346163068317962640517242295626672819467330093209362889759567024823862054033225663372285870674818468021566312496546404815837165750442363989841376452322398442732022565926568489989679282873750654078626674917085150675864061004298019003403524389362734439386152668381464131879100786896794371443045440533011560323693989705248990950015258225415391705581898015046296480941303784637975699291543049162727600812616462155727863207494147472757303228989079185305773011806170437141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8dceb666d6946972ddc7de81104d48cc2d96232c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.salvagenti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016aee3cb76a000004030046304402201bab8f19ca0df3966808f720b1eaee1bb663443a4faabaf2e386ccb44e5dae0c02207047928ab63d44fab612b5e38c827455b8ec6623478a0401463b4256f07efa2100750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aee3cb8030000040300463044022036e93fd136390f7f20a506df0a992c5014ba0f3c0accb73ea5eab9cca55ff12f02204a3d61ebbe99cfda9cc8e1d07210f1158d63638d68d0325a775e2c65113ed9c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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