stradaperstrada.regione.puglia.it

Issued by R3

About this certificate

This digital certificate with serial number 03:d2:e9:ad:f3:a7:19:ce:70:de:b5:97:cf:eb:b1:3c:c2:b7 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stradaperstrada.regione.puglia.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:e9:ad:f3:a7:19:ce:70:de:b5:97:cf:eb:b1:3c:c2:b7
Serial Number (int): 333106768180916852714962428948428927845047
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 30:5b:73:9b:9d:55:65:28:18:80:1e:dd:e4:77:9e:d8:4a:4a:92:d4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:09:b2:cd:5a:99:05:b9:7c:6c:32:66:41:17:08:bd:03:7a:91:bb
Fingerprint (sha256): 08:bc:92:72:50:03:5c:4a:4a:12:0b:76:ec:f1:0f:a3:30:b8:5c:a4:0b:cf:bc:62:e6:00:0e:e3:ae:4c:31:f4

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stradaperstrada.regione.puglia.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stradaperstrada.regione.puglia.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stradaperstrada.regione.puglia.it
www.stradaperstrada.regione.puglia.it

Other certificates including the domain name regione.puglia.it

(limited to 100 certificates)
lavoropertetest.regione.puglia.it
ssd.regione.puglia.it
catalogo.istsvc.regione.puglia.it
sigeaweb.dev.ect.regione.puglia.it
sslcertificate1.queue-it.net
sigea.dev.ect.regione.puglia.it
notizie.ect.regione.puglia.it
annostatistico.test.ect.regione.puglia.it
ssd-dev.regione.puglia.it
spid.test.istsvc.regione.puglia.it
image.client.generali.ro
api-gw.test.ect.regione.puglia.it
san-3-s50.tlsprovisioning.exacttarget.com
arpal.regione.puglia.it
catalogo.test.istsvc.regione.puglia.it
demo.ammtra.dev.istsvc.regione.puglia.it
catalogo.test.istsvc.regione.puglia.it
spotweb.dev.ect.regione.puglia.it
*.ect.regione.puglia.it
www.osservatoriofitosanitario.regione.puglia.it
www.elezioni.regione.puglia.it
stradaperstrada.regione.puglia.it
formazione.sarpulia.regione.puglia.it
c2s.istsvc.regione.puglia.it
webmail.regione.puglia.it
ciakinpugliadoc.regione.puglia.it
sslcertificate1.queue-it.net
custodiamoturismocultura.regione.puglia.it
vdc.regione.puglia.it
sitra.test.istsvc.regione.puglia.it
ssd.regione.puglia.it
*.regione.puglia.it
www.studioinpuglia.regione.puglia.it
bacheca.ect.regione.puglia.it
spid.test.istsvc.regione.puglia.it
monitoraggio.dev.ect.regione.puglia.it
sslcertificate1.queue-it.net
amq.ect.regione.puglia.it
image.client.generali.ro
sslcertificate1.queue-it.net
ariadimasseria.regione.puglia.it
c2s.dev.istsvc.regione.puglia.it
bacheca.ect.regione.puglia.it
buypuglia365.ect.regione.puglia.it
amq.ect.regione.puglia.it
spotweb.ect.regione.puglia.it
webmail.regione.puglia.it
www.studioinpuglia.regione.puglia.it
vip.test.ect.regione.puglia.it
albo.dev.ect.regione.puglia.it
sslcertificate1.queue-it.net
www.polizialocale.regione.puglia.it
formazione.sarpulia.regione.puglia.it
www.fornitorissr.regione.puglia.it
www.accompagnamento-pingiovani.regione.puglia.it
sslcertificate1.queue-it.net
refin.regione.puglia.it
www.presenze.regione.puglia.it
san-3-s50.tlsprovisioning.exacttarget.com
webmail.regione.puglia.it
ariadimasseria.regione.puglia.it
api-gw.ect.regione.puglia.it
idp.regione.puglia.it
sigea.test.ect.regione.puglia.it
sistemacorolla.regione.puglia.it
webmail.regione.puglia.it
aret.test.ect.regione.puglia.it
api-gw-rupar.test.istsvc.regione.puglia.it
c2s.dev.istsvc.regione.puglia.it
datiistat.ect.regione.puglia.it
www.luoghicomuni.regione.puglia.it
statistica.test.ect.regione.puglia.it
www.beniculturali.regione.puglia.it
refin.regione.puglia.it
spotweb.dev.ect.regione.puglia.it
*.istsvc.regione.puglia.it
webmail.regione.puglia.it
limesurvey-ist.dev.istsvc.regione.puglia.it
valore.regione.puglia.it
delegati.ect.regione.puglia.it
backoffice.ect.regione.puglia.it
backoffice.dev.ect.regione.puglia.it
www.studioinpuglia.regione.puglia.it
amq.test.ect.regione.puglia.it
amq.dev.ect.regione.puglia.it
designsystem.ect.regione.puglia.it
notizie.dev.ect.regione.puglia.it
notizie.dev.ect.regione.puglia.it
image.client.generali.ro
webmail.regione.puglia.it
arpal.regione.puglia.it
vip-universal.test.ect.regione.puglia.it
*.regione.puglia.it
polr.regione.puglia.it
stampa.elezioni.regione.puglia.it
luoghicomuni.regione.puglia.it
monitoraggio.ect.regione.puglia.it
api-gw.ect.regione.puglia.it
spid.test.ect.regione.puglia.it
refin.regione.puglia.it

Certificate

The complete raw certificate details for stradaperstrada.regione.puglia.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333106768180916852714962428948428927845047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-05 01:02:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-03 01:02:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stradaperstrada.regione.puglia.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 870360811380945375237691576954229712297937782338888910262144617731163635473170764357197640368050765624664273130208692060737379077142239755546186330148460443557661338970138730947228107045474751599159607764345790430699050371886041359621987327200287922312004228933988952145608340053042911015148596541691211499226630089416494664640605893926529855907421365197515973835461895212534292741508314222977740453411991512915314719662001028075092699430926453680709549276319722557968525460249699981792349745507354401299384663313100295034532914605505114702432264854845912195117790244196685041590422535331933925392463250574187780819590803034389636754706176883796306840320618635484018872307823612542027224588813970656967648148498438394890079406172056973051513068458775101518015113343620560468305796338408281204108242384286977905392876609784055984534726809966147295259098868667311864331045454606122408329529169738840368125338740081535251631988436258619769778913653995664122628841480602249870171318073944362087303293747349435646652198956649740327968687758380760244811793079090616669672309920123112734845089747759479826326876075587014935913482877315937370752114480281844701781991231088957869191763173154979242372496860822109158938322208334019627158811921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							305b739b9d55652818801edde4779ed84a4a92d4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stradaperstrada.regione.puglia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stradaperstrada.regione.puglia.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001e077ede83954c5a9b8a1771a3cd73bc5ea19e7db90fb1634c15722e171f594d1e2cd69e59acd5ccb7d17134f29842fc35e2ff336e77d577197b0f594ba2c07d40372f2ada0fab5e2367a6de874bbd19e0ef4ce7b52031405d844ddc10a36fd6b16b091f479e725056d12d2296d9648d150c49b1690845cae0731bdc2c30a93164519fe937ecd0478211bd691fa09da558c0debf035001b5eb45423ba46c0846d8c2f403f22ae29c85df6cf5679fff1251c2cba7be60247491ba02ae712292c1c70d292678b7187ca1e3ea82e6d01abfee5ee9b86c881655c692e3dacea31b38c083d3ba354a99a21c72f2cf7d4ef10919e49ac9f8241f5e9410aa4533bdd5e6