pavullonelfrignano.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:53:1b:d4:c3:1b:7d:03:dd:78:24:f5:15:80:0a:96:c1:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pavullonelfrignano.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:53:1b:d4:c3:1b:7d:03:dd:78:24:f5:15:80:0a:96:c1:79
Serial Number (int): 289617288129786557918182704003932996682105
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ef:64:52:01:fd:93:37:d2:fc:bc:89:f8:db:c4:5a:31:44:7c:03:cb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:de:4d:cc:e8:a2:96:7e:62:23:bb:2b:25:de:7c:80:42:9a:19:a9
Fingerprint (sha256): 08:99:6e:51:d8:5e:db:2a:f0:d2:7d:36:0b:14:d3:7a:6d:1e:a1:a3:af:ce:ef:44:fc:d6:f2:04:ca:a0:fc:d8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pavullonelfrignano.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pavullonelfrignano.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pavullonelfrignano.org

Other certificates including the domain name pavullonelfrignano.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for pavullonelfrignano.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289617288129786557918182704003932996682105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-01 23:45:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-01 23:45:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pavullonelfrignano.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 864845621383778954748775431899584457128012417301090908427857959351999622777394176057318907394637658872852807876861360483465035803880948682006301106378646035327709762999293685478907671094879040019420958259031172815145048466018735486633617037635364096251293880577181433615975046952988428190809178043418351258507817951882863284602991588066103578583688669897134775921622221333893196239429051850060207091005844086956060463118630177626702302293085495952603802882067677504737782710416057043639147428100172181292494884340881799366474298378361333172311377418732076302755789538715154347931689741201735274462130629683878600972456843271083559113464732824076952975486663647092490969534074783576078407690090461526536428982907139761708436217494539480325756886007204266424897533667715226850004145103829900089318573365617475880131823192177793356950784395882183433768672900183826329229755198122757756924066041445162026946951521086954027372958863742785280800376499943349727854348918306997745619650952350200435364675740760147665905578444814328533566290167480146748632082824993408804431396861808711145887809726929617741043913795465887553856815148513008187646746525836298888862219511926640847404317905808372324475311277655087470450713347401241002139303667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef645201fd9337d2fcbc89f8dbc45a31447c03cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pavullonelfrignano.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170035be9c10000040300473045022100f2d62abbee75008e2d40d0a402e672685c8c66e730554424ca09bd605c9426ef02202811ef483c6fa4b99624f5ce1cda6e17ae0ec2da3cbe4d6c7ffd90111ef42890007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170035bebc300000403004830460221009e0c1d0720324fac198d36ec396c5500960508062ccfa7d34197530869d23733022100e7508387f68699acbf6873b3b18a1dc4743c40a8ae96f17e6a3d6b5b86f41458
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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