terradimareterradamare.it

Issued by R3

About this certificate

This digital certificate with serial number 03:f0:f1:58:63:9e:44:b4:33:32:82:d4:fe:06:21:c4:af:7c was issued on by Let's Encrypt.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=terradimareterradamare.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:f0:f1:58:63:9e:44:b4:33:32:82:d4:fe:06:21:c4:af:7c
Serial Number (int): 343325428745911550229139707154169111818108
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:cc:0d:d5:b9:66:73:68:70:09:10:7f:9c:33:73:02:66:04:fd:1c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3e:8d:2b:f2:28:0e:84:56:bd:f9:65:30:c4:4e:84:d3:7c:5a:c8:1c
Fingerprint (sha256): 08:b0:2a:42:c9:3c:ce:a6:1e:ab:02:45:6f:0b:3d:86:4e:8e:60:62:7a:95:ff:79:42:e5:c0:25:31:cf:b8:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate terradimareterradamare.it

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for terradimareterradamare.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aliblu.it
*.guidadiagrigento.it
*.guidadilampedusa.it
*.it.aliblu.it
*.prov.it
*.terradimareterradamare.it
aliblu.it
guidadiagrigento.it
guidadilampedusa.it
prov.it
sicilia.pro.aliblu.it
terradimareterradamare.it
www.guidadiagrigento.it.aliblu.it
www.guidadilampedusa.it.aliblu.it
www.prov.it.aliblu.it
www.sicilia.pro.aliblu.it
www.terradimareterradamare.it.aliblu.it

Other certificates including the domain name terradimareterradamare.it

(limited to 100 certificates)
terradimareterradamare.it
terradimareterradamare.it
*.prov.it
*.it.aliblu.it
sicilia.pro.aliblu.it
terradimareterradamare.it
*.it.aliblu.it
terradimareterradamare.it

Certificate

The complete raw certificate details for terradimareterradamare.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mkTYa555IZseKfyM7L6
5AoKsS0xHt8IvD/oiHxhpdNKxtTKzYxDNHNc+CvrXpxRcSSF6ez4epbD8d1znaKZ
/xVoBJA4vWuxSazvXajhyL7u+sDdL+rz+p8+y+f3rd2eemUB2ZEA7GpWQHvC3UeU
aKPqOK454e/zWmydTZwJrNEKLCzz2hplgI1RXQ5mNs/DErYNDCKFZPSCvWfV47Eh
0cvuf16g3T8E/rtWa6gH+BFpzMJbtMUzkl9XuUCA7G9OuKxxNYBkN//x9LK/O4eq
Qj7Dj7CS6730t+GRy1zRdbsiz1858cPbR+7S0OeawKUuBk1lIoJOQBKuDA5kfn6X
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343325428745911550229139707154169111818108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 03:05:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 03:05:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'terradimareterradamare.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28581671685724150945130103509025649571816195265867641702120359548417178158859364993359016956712578094580308688245754562833429177056624293883853936204481653957235351982300733198709626934813237865469351770311880123657298520115093065180087746812172580597113951150910729320389913499645645221330239341551973738451881914528945120601912113341602405389883957929118579726450229507014101818452601109625332245211464266522053057149407616885493276644643493585457836981729576425320581762012549130438951198771116607581062605909996019904440142578935471961694578249812249188488626025033022242863779296127848905156297498707272377734981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bcc0dd5b96673687009107f9c3373026604fd1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (392 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidadiagrigento.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.guidadilampedusa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prov.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.terradimareterradamare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidadiagrigento.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guidadilampedusa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prov.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sicilia.pro.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terradimareterradamare.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidadiagrigento.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guidadilampedusa.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prov.it.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sicilia.pro.aliblu.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terradimareterradamare.it.aliblu.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f2d2e3a570000040300473045022034a4546e7d707cc674ef1e2b1d5cb426b0fabb40889e6ad595042af9584c1b9a022100b126efc8fd09cabc6bc974320233ca764cea39f44624664db8147f9c9382de78007700dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f2d2e3b180000040300483046022100aae231dacc868d65920049bf68a285cf53b41fc1160e741bb24353cd37c58d3a022100c7c43cf1e482e2a47a283ef563c6dd322c4b9a1c4fe4975183f39ad883792c68
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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