reggioemilia.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:b8:a9:d0:d9:3c:aa:7d:7d:16:c4:3e:92:2d:95:4a:60:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=reggioemilia.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b8:a9:d0:d9:3c:aa:7d:7d:16:c4:3e:92:2d:95:4a:60:da
Serial Number (int): 411286823175617227791805205885427800236250
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ca:29:d3:bc:bc:9c:ef:10:f3:d5:f0:f1:d9:04:76:26:9b:01:a4:8a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e7:c8:30:19:4e:6a:12:55:e6:4f:80:bb:21:2f:a5:21:76:8f:44:18
Fingerprint (sha256): 08:67:25:0c:1e:3f:7c:ed:11:1b:1c:33:17:6f:5f:b3:b5:74:51:9a:69:7e:d3:df:97:39:67:c9:c5:51:d3:1f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate reggioemilia.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reggioemilia.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reggioemilia.org

Other certificates including the domain name reggioemilia.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for reggioemilia.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 411286823175617227791805205885427800236250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 16:03:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 16:03:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reggioemilia.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 769214316770370504847245004751146625143290962260136748646497356780990616182239129792426924995116859027309174527807707219445077485413812166235967677980641637772716805614082943056343757522586262720257289381596827351151653134145231936253569037039513662863743277266761318769546906388976471394840264516604775068196619062286864962347828590549323666597096978861467720304842728591075710748725672562846565975882877550619145371221099501290065971333171397915901859358230684277802004004278417873247151599367655664566762532107458029279273064515090712859660071192450778687855162852529956897283088996336539679892811828159606855760894796499043631561710234913571907319726124129381942279307164882351530444001835628072493904378004365610730198103410829045488526790763032992066119823000799671680132245925425056466035645803613000786324549434762893210259263241514733771371480561772919478625004519737600194008163850254547796447084045062395164737978190410915384101922178236975836266128251065633494525271904730411731461004129664487302930885449837693190466229328787611983076151290185883366326112708707553273035531583105626975711064089191473676309492817742573863426125024059180557916098261149182228828821361528527377588309324005500949604070555571208382581743541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca29d3bcbc9cef10f3d5f0f1d90476269b01a48a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reggioemilia.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016eeb9d5ad80000040300463044022073b921c29bdb8c22094bb9c52819b84c77300d35607d319755b4ef5a8a2a4e3702205e6a02c7e7e02dda7b7786b8ea4eb566827ea1561b05f13a9997cc4c819702d00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016eeb9d5b940000040300463044022019cd3a3cc2cf521eaa148e1a3e4ba3f911dbaeb04b07df1c919f47cd0468c6e302202ab09501a82ac1da75fb973f465b43cc493300cfe0cc36c4eb3417371e3d2576
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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