www.falegnameriaromamontagnese.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:67:dc:8a:fd:aa:1b:4a:a9:fb:f3:35:17:b5:64:64:b9 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.falegnameriaromamontagnese.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:67:dc:8a:fd:aa:1b:4a:a9:fb:f3:35:17:b5:64:64:b9
Serial Number (int): 271343102043932575242593859525788259607737
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 11:cd:1e:3b:41:9c:f8:f4:3e:41:0a:d5:17:2f:f4:60:55:93:72:57
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:cc:cf:7e:95:1f:3a:bc:07:a6:30:39:a7:e1:21:4e:81:3b:2c:e0
Fingerprint (sha256): 08:dd:86:81:77:7c:3c:d2:c5:d7:3b:5b:75:ed:bd:d6:9e:05:8d:45:23:5b:23:83:41:6a:83:2a:a4:b1:f3:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.falegnameriaromamontagnese.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.falegnameriaromamontagnese.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it

Other certificates including the domain name falegnameriaromamontagnese.it

(limited to 100 certificates)
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it
www.falegnameriaromamontagnese.it

Certificate

The complete raw certificate details for www.falegnameriaromamontagnese.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271343102043932575242593859525788259607737
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-02 15:39:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 15:39:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.falegnameriaromamontagnese.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 885979144827872014658731976983428544481523680237330311430916327238023243468439000435090462685117128883985985554282716332477991348730872828978144360564658437127254763695027672818396894088601315320881011918210260431680517977097249874482464673531804883903702746474910119434756276097861234439429968838323899244526822214320182260033183761944446478809921713423100789908506319049294670092085874434534026021789284358515149126165584032091952856393910227698553632881115123336128645766618051572658283098154461810846135922821634436527460576692730173841944893728115623338268151105550610616461081798480000971148883523553550471147221032398374985382889655885309122838542351798666516621761031032853917175290846383114611861683641741611277874183139304180932732120302938196003718313047017233063458621790973777860314735710049703065288363996459372273028752022415850108587539070812660264908511761093941322083007789518103721221976064357348908184833080294073533559383304071786063314225273477686196152788965999023173089959979110172533308698280945512894593497128797965648138443358694147676167523697591675031743693399760950387972948177720331974668682046712404391336285591336508891157878102421965200636880462604547605135823440474053081642703148480041109197847159
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11cd1e3b419cf8f43e410ad5172ff46055937257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falegnameriaromamontagnese.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.falegnameriaromamontagnese.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d8d5777d9000004030047304502201036f7991d21f58c239525e2acd54c7cd5e0304cd0c906fafdc24ab8e798936f0221008a357643f04b2989b631e6a4712e04a8db4a49aeeb976d903558449bf148940b007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d8d577768000004030047304502200ae85a6be2c35b5adc19a95c3a776cd6651c24e97eac5456eb2edc3d0c43c908022100c8a7094b4bf8f1eaf0e3c1f660b1a773afbfb0467415ae8a9078a4c36bcf8d74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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