besanainbrianza.org
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:eb:8a:17:75:61:a0:f9:f6:da:4d:23:88:57:9f:23:f2:9e was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=besanainbrianza.org
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:eb:8a:17:75:61:a0:f9:f6:da:4d:23:88:57:9f:23:f2:9eSerial Number (int): 341486769288724218726219595862136829768350
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: cf:27:88:47:80:d8:6b:46:3d:e2:94:0d:29:e8:56:46:12:22:65:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): 90:1d:d3:e2:c6:78:d6:f1:6e:ca:b2:c8:04:d6:16:ae:a2:90:17:7b
Fingerprint (sha256): 08:dd:ec:89:35:bc:af:cd:5e:a8:63:2f:24:77:0b:95:bd:1e:a2:e0:df:c0:0c:52:7d:48:42:d0:c1:9b:57:73
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate besanainbrianza.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for besanainbrianza.org
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
besanainbrianza.org
Other certificates including the domain name besanainbrianza.org
(limited to 100 certificates)
Certificate
The complete raw certificate details for besanainbrianza.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISA+uKF3VhoPn22k0jiFefI/KeMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MjkwNzE4MjZaFw0x OTEyMjgwNzE4MjZaMB4xHDAaBgNVBAMTE2Jlc2FuYWluYnJpYW56YS5vcmcwggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDj2UDnPISufhuRwOzsA0VlD3m4 kRaLYC2snJGIur/Xa/NyvnLM7ZGqw4GskIyvzcA6NxPq6VtQV2IipcZvHh42U5m0 RYXbKy475fVfh7Fa0LFuq8VHFu2NaTtvAjw9yTMFwk59rMV0wlh4O8D/WKlrE2HV 0NiTi5l7Tt3TJAmdyDikgUR8SQOPpqPZ9cs29xu/7Z0HZq+6ul+iEMTp32f2tVI9 rt5kZ71ZNwVfXyVlBGsX9Y/0lO6K5cZIyPVCpVKRe0zE4wI4vmJHWsXrcZktMkda HXLK8VA6A2q30RgZ5fOM/woyWYduR0OAMVQHDwhm1wXSBpmKrYfo0/FlPSOaohkv o+veDbaneMKjBeUzvoulANZC2OgqqeTvQNBH5+zbb+ROM8lEi4iCK8Yvz65hv6xP MessCPQ5UGO+Gp4hBl7afUoRWch21Fe99AUYtzKY6ZH6a9PWQ3mxfVOQLRo5YlyE aWcLb8OQI2y1YzdrJ3w1XBLLKG0Op/K9BKYZARt5wErewk6m8w46btzoSNQV2d01 lnFGjAHS49DEoGQZ7cjYkEQmG9OTYTmi8L+Z5yFiUzeHgVG37EDd09U5VBXmKEFn 4RXhl9GsSvW/MFm6AYaWxjOh/btUT5iUBr1mSXIpfbgWhYGpe0Blpbzy2L2xmLCH NQOBQVjvqJ/y3chB9QIDAQABo4ICZzCCAmMwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBTPJ4hHgNhrRj3ilA0p6FZGEiJl7jAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2Jlc2FuYWluYnJp YW56YS5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEDBgorBgEE AdZ5AgQCBIH0BIHxAO8AdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0 eAAAAW18GXYOAAAEAwBHMEUCIG1slmSHUwqJIvssmF2wTUi6FqRVSS3x49vqmfHM Yvq1AiEAp/6vVX0QtaJjK/gfmSCviea8alCSzkMlaNWj9kaxOGUAdQBvU3asMfAx GdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAW18GXfhAAAEAwBGMEQCIGefz9pQ sXHpwQZDmmWJHbrlXfVPhRRF4LdKHdRoazQFAiAIWxnKQR19ipfF8IdPnfDDafu5 3RCi5Fi5HCaOKInDJjANBgkqhkiG9w0BAQsFAAOCAQEAewMvmKa/Iey265N5iGpj 8N7VqQuPT3FAL/Iji2IRUAHqRMtCpfEYdO9nGVuCWS28ZNDfukOtuyngMbZTmPij Ok/mZXWtszYZCuSO5LhK9lG3qyJWuWNRK7WZagYoNE5npon4hThfFfl+8xtdhU9z 57txgRSwLTTRxQt4ISGSKr0c4itsC07oTRBy+BC8ywyYw2Ud9RfGJR2iwEXU1JjB XJXpIpRUlF1ZlF5NWZTci3uVeDS7sWRAFVBgzpG4f8nIZ6SHklm/zKuwZ80ZqtO2 GzFmcYy/Aq5bO+XJG8yDt/vsm8UF6zqhqzv37tkZdsoflhKBLlkvZtgaF2k53f94 ww== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA49lA5zyErn4bkcDs7ANF ZQ95uJEWi2AtrJyRiLq/12vzcr5yzO2RqsOBrJCMr83AOjcT6ulbUFdiIqXGbx4e NlOZtEWF2ysuO+X1X4exWtCxbqvFRxbtjWk7bwI8PckzBcJOfazFdMJYeDvA/1ip axNh1dDYk4uZe07d0yQJncg4pIFEfEkDj6aj2fXLNvcbv+2dB2avurpfohDE6d9n 9rVSPa7eZGe9WTcFX18lZQRrF/WP9JTuiuXGSMj1QqVSkXtMxOMCOL5iR1rF63GZ LTJHWh1yyvFQOgNqt9EYGeXzjP8KMlmHbkdDgDFUBw8IZtcF0gaZiq2H6NPxZT0j mqIZL6Pr3g22p3jCowXlM76LpQDWQtjoKqnk70DQR+fs22/kTjPJRIuIgivGL8+u Yb+sTzHrLAj0OVBjvhqeIQZe2n1KEVnIdtRXvfQFGLcymOmR+mvT1kN5sX1TkC0a OWJchGlnC2/DkCNstWM3ayd8NVwSyyhtDqfyvQSmGQEbecBK3sJOpvMOOm7c6EjU FdndNZZxRowB0uPQxKBkGe3I2JBEJhvTk2E5ovC/mechYlM3h4FRt+xA3dPVOVQV 5ihBZ+EV4ZfRrEr1vzBZugGGlsYzof27VE+YlAa9ZklyKX24FoWBqXtAZaW88ti9 sZiwhzUDgUFY76if8t3IQfUCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 341486769288724218726219595862136829768350 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 07:18:26 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 07:18:26 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'besanainbrianza.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 929541379488780855899549687588673316100155783786786140721613061160785521035349869713016694693487437075817188013892421945699023120456896281508090843464928082959206091416753948289598445981529348108578507555831452886573379852534939691216814690503321783421186209584504262908306048583347369484837339117900084872086555303367347593239068816395875200465633109245056408630344082532145631723466136424095675730856697681218714450423815556144409086410118006631373383200398124028520601226223489198011178362782325091789163496989126255827831821348266977872029655232648014661480354843106549392215545270330376357937717332897283103131691616998661090167067807364156827245183272757416901489413808700168666533010640571537790147240089560991151120732352304384840823446856393260595810511604129297140290533238992201830049480884907217029781970828481050589312961307536078313335281956170708514580259710690521209895577228842524491659186599456973310625037781911834250280741240054038290192786064925746669940745882695184608993792098059736099336378991988356900940077383703572275904035848284984931192162143480950182622207758812572366116362863533721151807476349698944056940574596541555108007828266290594539737309358364887290743465370095136456167384865224152844467716597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cf27884780d86b463de2940d29e85646122265ee . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'besanainbrianza.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7c19760e000004030047304502206d6c966487530a8922fb2c985db04d48ba16a455492df1e3dbea99f1cc62fab5022100a7feaf557d10b5a2632bf81f9920af89e6bc6a5092ce432568d5a3f646b138650075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d7c1977e100000403004630440220679fcfda50b171e9c106439a65891dbae55df54f851445e0b74a1dd4686b34050220085b19ca411d7d8a97c5f0874f9df0c369fbb9dd10a2e458b91c268e2889c326 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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