phaver.it

Issued by R3

About this certificate

This digital certificate with serial number 03:92:6b:b4:87:91:b5:85:d7:52:09:3d:da:ff:c2:47:79:55 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=phaver.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:92:6b:b4:87:91:b5:85:d7:52:09:3d:da:ff:c2:47:79:55
Serial Number (int): 311161248124390836521175835184617455319381
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c1:8c:00:39:c2:2d:bf:0e:01:f5:4a:d5:68:f2:31:a7:54:5c:d6:fa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d6:cf:59:d0:28:f9:31:c5:73:ee:f6:37:d4:d7:e9:c2:41:be:61:21
Fingerprint (sha256): 07:f0:d9:69:40:59:4a:9f:83:fa:51:2e:97:d5:93:ca:5f:f0:ce:9e:4c:c3:ec:69:37:db:db:d8:b3:7b:70:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate phaver.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for phaver.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

phaver.it

Other certificates including the domain name phaver.it

(limited to 100 certificates)

Certificate

The complete raw certificate details for phaver.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GniGufgj2rtGUVlyLSH
KDOd6xO3G6B2yiSkD0tUBUOWs2h3My9eHE98i9MmojNcp74PPF8WKbzYiaADM4EH
unyGIp4jSRe7QBlJHn5lY/v6RxNfO80d8GuC09/qpNFmdN1OyHamz2DgE+7mf8ff
tFmK9/ctDOM14DsmmaoGF24VaZ6FFpZo0TTINCoTJgm1aeShHc7opYv9ngbAoJpe
WmvSOq28DoORen431B/E4W0x+ziVNld/BRuOixPAnohSkKaPRduLcR2f+38ffpFc
mU4lnUg6f6q0jmlmRXo03P7b7Jfx6hSvs38aaRva2hTSwM2f4Fh3dkzl6pLvAtB4
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 311161248124390836521175835184617455319381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-10 03:00:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-08 03:00:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'phaver.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29339499715415087042132795326743208310373585743186721886198977842333911174019275412344038250005809687703143486457659168272824841059375959496588571980862114900188624276929774005732414801660029922935144796719807119558626859901020913522894653959725260732151473925275719013002820750786941966217950086339215961249831652342782770587874052029278389567953383221925183310495794265625291202465501947744393560826528077663089380397340724885909414563065229571967941730373318411510885840299428100492776185525295116487892329536903526324780045867321863658606807985977589798120661762648555431038642804891491461047408741420171357354197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c18c0039c22dbf0e01f54ad568f231a7545cd6fa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phaver.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f60a92bd30000040300473045022100fe8291c8961b63d9ef148d019fbc9a7d974e8c68ca9ad1feb4ffeb85222312350220303f0d062af62b14d13c77b5e621fb7dfda7c0d665b6aa796d39ceb31b84c4f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f60a92bd1000004030047304502207d34cc029af7063dd0030f53a72887d3614e462c45b246891aa0290c6e5e37bc022100c7f80c158e784444111f6435dbf5eca08e927f162d30ced07ba12182a5000591
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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