besanainbrianza.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:eb:8a:17:75:61:a0:f9:f6:da:4d:23:88:57:9f:23:f2:9e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=besanainbrianza.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:eb:8a:17:75:61:a0:f9:f6:da:4d:23:88:57:9f:23:f2:9e
Serial Number (int): 341486769288724218726219595862136829768350
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:27:88:47:80:d8:6b:46:3d:e2:94:0d:29:e8:56:46:12:22:65:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 90:1d:d3:e2:c6:78:d6:f1:6e:ca:b2:c8:04:d6:16:ae:a2:90:17:7b
Fingerprint (sha256): 08:dd:ec:89:35:bc:af:cd:5e:a8:63:2f:24:77:0b:95:bd:1e:a2:e0:df:c0:0c:52:7d:48:42:d0:c1:9b:57:73

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate besanainbrianza.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for besanainbrianza.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

besanainbrianza.org

Other certificates including the domain name besanainbrianza.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for besanainbrianza.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 341486769288724218726219595862136829768350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 07:18:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 07:18:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'besanainbrianza.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929541379488780855899549687588673316100155783786786140721613061160785521035349869713016694693487437075817188013892421945699023120456896281508090843464928082959206091416753948289598445981529348108578507555831452886573379852534939691216814690503321783421186209584504262908306048583347369484837339117900084872086555303367347593239068816395875200465633109245056408630344082532145631723466136424095675730856697681218714450423815556144409086410118006631373383200398124028520601226223489198011178362782325091789163496989126255827831821348266977872029655232648014661480354843106549392215545270330376357937717332897283103131691616998661090167067807364156827245183272757416901489413808700168666533010640571537790147240089560991151120732352304384840823446856393260595810511604129297140290533238992201830049480884907217029781970828481050589312961307536078313335281956170708514580259710690521209895577228842524491659186599456973310625037781911834250280741240054038290192786064925746669940745882695184608993792098059736099336378991988356900940077383703572275904035848284984931192162143480950182622207758812572366116362863533721151807476349698944056940574596541555108007828266290594539737309358364887290743465370095136456167384865224152844467716597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf27884780d86b463de2940d29e85646122265ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besanainbrianza.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7c19760e000004030047304502206d6c966487530a8922fb2c985db04d48ba16a455492df1e3dbea99f1cc62fab5022100a7feaf557d10b5a2632bf81f9920af89e6bc6a5092ce432568d5a3f646b138650075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7c1977e100000403004630440220679fcfda50b171e9c106439a65891dbae55df54f851445e0b74a1dd4686b34050220085b19ca411d7d8a97c5f0874f9df0c369fbb9dd10a2e458b91c268e2889c326
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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