reggioemilia.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:b8:a9:d0:d9:3c:aa:7d:7d:16:c4:3e:92:2d:95:4a:60:da was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=reggioemilia.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:b8:a9:d0:d9:3c:aa:7d:7d:16:c4:3e:92:2d:95:4a:60:daSerial Number (int): 411286823175617227791805205885427800236250
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ca:29:d3:bc:bc:9c:ef:10:f3:d5:f0:f1:d9:04:76:26:9b:01:a4:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): e7:c8:30:19:4e:6a:12:55:e6:4f:80:bb:21:2f:a5:21:76:8f:44:18
Fingerprint (sha256): 08:67:25:0c:1e:3f:7c:ed:11:1b:1c:33:17:6f:5f:b3:b5:74:51:9a:69:7e:d3:df:97:39:67:c9:c5:51:d3:1f
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate reggioemilia.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for reggioemilia.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
reggioemilia.org
Other certificates including the domain name reggioemilia.org
(limited to 100 certificates)
reggioemilia.org
reggioemilia.org
reggioemilia.org
www.mississippistemcell.com
taggia.org
www.wellingtoncity.com
reggioemilia.org
reggioemilia.org
www.reggioemilia.org
atlantajointpain.com
conflicts.exposed
reggioemilia.org
reggioemilia.org
reggioemilia.org
armyair.com
duratravel.com
834.me
www.reggioemilia.org
www.reggioemilia.org
www.reggioemilia.org
www.reggioemilia.org
reggioemilia.org
reggioemilia.org
www.mississippistemcell.com
taggia.org
www.wellingtoncity.com
reggioemilia.org
reggioemilia.org
www.reggioemilia.org
atlantajointpain.com
conflicts.exposed
reggioemilia.org
reggioemilia.org
reggioemilia.org
armyair.com
duratravel.com
834.me
www.reggioemilia.org
www.reggioemilia.org
www.reggioemilia.org
www.reggioemilia.org
Certificate
The complete raw certificate details for reggioemilia.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGVjCCBT6gAwIBAgISBLip0Nk8qn19FsQ+ki2VSmDaMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMDkxNjAzMDhaFw0y MDAzMDgxNjAzMDhaMBsxGTAXBgNVBAMTEHJlZ2dpb2VtaWxpYS5vcmcwggIiMA0G CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC8jKN6mpv4lXfuZcVp9CGkbairgXui G/egp9FkU8oUzBcRVdZPVLna+r1xZ7FCmDXi+8gmnEU25mYFLtIxBvO6urifLaQJ SOZrwmuk6zspyL367j/rVJ1AzBYyGYkT2O654pwAAFpAiamnQJf67zdgjBbuN6Ya cfXrYgwOhxGXQkA+4wKc8kJgCIxCorUCwt/9MuhM9rnXfuXbWRHFtFUdzH1DwQn5 A2dpzk6JScS+CKdh+2bFI7Uv7Ro6uLViwVtghcJ/E3oRXHoty4k+5om6OVSrQyDw Vth38/H1VqhluDcxxS9QVGOWQ4Lwec87WwFlTk5P61zLZXYkM/z5/Hh3NDcoluVG iLpY1o5zjrRdIu5mVOJuvUbSYAdrPlyaED782sGEdoSm2TUpuRlrmaG/7QGK1eaX FLw3izz3v8nE+G3vMMW2QW1LMWS0f+GIr9uJFsUI5JgfHQMs3vohMKtbr9N0Hvxw KDCuDIAvoSMeVs5ZjzV0WHjLUEAf96G33fRrPsvvVbZ4lcjzxUrXK0wV5uuPQhRV v5JAa7p293W3/TtUzmZfxSjbVqlG38ZmQxXA3GbNa7YRECVhg3h44ATfWAmi5E5d dFUfOqR8LdQS3zI8Ol+NMvgFixCrd81eE6us4qvrTCdZ3H6lmzExyBK3izxUi/SJ Y+DaSFJ9Cg6ftQIDAQABo4ICYzCCAl8wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTK KdO8vJzvEPPV8PHZBHYmmwGkijAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv 86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHJlZ2dpb2VtaWxpYS5v cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggECBgorBgEEAdZ5AgQC BIHzBIHwAO4AdQCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW7r nVrYAAAEAwBGMEQCIHO5IcKb24wiCUu5xSgZuEx3MA01YH0xl1W071qKKk43AiBe agLH5+At2nt3hrjqTrVmgn6hVhsF8TqZl8xMgZcC0AB1AG9Tdqwx8DEZ2JkApFEV /3cVHBHZAsEAKQaNsgiaN9kTAAABbuudW5QAAAQDAEYwRAIgGc06PMLPUh6qFI4a Pkuj+RHbrrBLB98ckZ9HzQRoxuMCICqwlQGoKsHadfuXP0ZbQ8xJMwDP4Mw2xOs0 FzcePSV2MA0GCSqGSIb3DQEBCwUAA4IBAQCB4/gZ70Sap/Hf1OgetuGk3uQDysND 52lWZvRl2NAHttLa+b/0NdfXr2N1J1mYwZT6ZUVTq+FL7xlh1kZhV9RaRtADC2X5 rMFlOYMd51r6daPuyLrBX/Bydg5Kb0PupFGeJMEXxbmPu3BN0LrJPx0I02nb0Kwl QIZ0Nwhx+/G2R3OeGv9i5MGF4xg0dinztvtqWXs42Yvo3aPBS2K7KqbbmjmM5niC 5TZ4CbysvaCTVeh9N2dguDLLi4iP3hpjQuQqZEb/cHhV5K0nhSaTyDPoWzR2SeYy 7a9lC6RSuBifwVJAZJv4txf56hBSIV5lUpxIPgzmFOlLujZ3E1u1Np1j -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAvIyjepqb+JV37mXFafQh pG2oq4F7ohv3oKfRZFPKFMwXEVXWT1S52vq9cWexQpg14vvIJpxFNuZmBS7SMQbz urq4ny2kCUjma8JrpOs7Kci9+u4/61SdQMwWMhmJE9juueKcAABaQImpp0CX+u83 YIwW7jemGnH162IMDocRl0JAPuMCnPJCYAiMQqK1AsLf/TLoTPa5137l21kRxbRV Hcx9Q8EJ+QNnac5OiUnEvginYftmxSO1L+0aOri1YsFbYIXCfxN6EVx6LcuJPuaJ ujlUq0Mg8FbYd/Px9VaoZbg3McUvUFRjlkOC8HnPO1sBZU5OT+tcy2V2JDP8+fx4 dzQ3KJblRoi6WNaOc460XSLuZlTibr1G0mAHaz5cmhA+/NrBhHaEptk1KbkZa5mh v+0BitXmlxS8N4s897/JxPht7zDFtkFtSzFktH/hiK/biRbFCOSYHx0DLN76ITCr W6/TdB78cCgwrgyAL6EjHlbOWY81dFh4y1BAH/eht930az7L71W2eJXI88VK1ytM Febrj0IUVb+SQGu6dvd1t/07VM5mX8Uo21apRt/GZkMVwNxmzWu2ERAlYYN4eOAE 31gJouROXXRVHzqkfC3UEt8yPDpfjTL4BYsQq3fNXhOrrOKr60wnWdx+pZsxMcgS t4s8VIv0iWPg2khSfQoOn7UCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 411286823175617227791805205885427800236250 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 16:03:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 16:03:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reggioemilia.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769214316770370504847245004751146625143290962260136748646497356780990616182239129792426924995116859027309174527807707219445077485413812166235967677980641637772716805614082943056343757522586262720257289381596827351151653134145231936253569037039513662863743277266761318769546906388976471394840264516604775068196619062286864962347828590549323666597096978861467720304842728591075710748725672562846565975882877550619145371221099501290065971333171397915901859358230684277802004004278417873247151599367655664566762532107458029279273064515090712859660071192450778687855162852529956897283088996336539679892811828159606855760894796499043631561710234913571907319726124129381942279307164882351530444001835628072493904378004365610730198103410829045488526790763032992066119823000799671680132245925425056466035645803613000786324549434762893210259263241514733771371480561772919478625004519737600194008163850254547796447084045062395164737978190410915384101922178236975836266128251065633494525271904730411731461004129664487302930885449837693190466229328787611983076151290185883366326112708707553273035531583105626975711064089191473676309492817742573863426125024059180557916098261149182228828821361528527377588309324005500949604070555571208382581743541 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ca29d3bcbc9cef10f3d5f0f1d90476269b01a48a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggioemilia.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eeb9d5ad80000040300463044022073b921c29bdb8c22094bb9c52819b84c77300d35607d319755b4ef5a8a2a4e3702205e6a02c7e7e02dda7b7786b8ea4eb566827ea1561b05f13a9997cc4c819702d00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eeb9d5b940000040300463044022019cd3a3cc2cf521eaa148e1a3e4ba3f911dbaeb04b07df1c919f47cd0468c6e302202ab09501a82ac1da75fb973f465b43cc493300cfe0cc36c4eb3417371e3d2576 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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