pastificiomaffei.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:42:a4:c2:0f:c0:04:20:f5:3a:41:c9:bf:0c:19:99:17:0a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pastificiomaffei.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:42:a4:c2:0f:c0:04:20:f5:3a:41:c9:bf:0c:19:99:17:0a
Serial Number (int): 284014495028411189529404344087325936523018
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cc:e4:2f:a6:6e:e9:2b:ff:c1:74:c7:cd:9c:14:ac:19:0e:9b:66:63
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a8:c2:65:4d:ed:21:9e:13:cb:de:c7:68:02:54:72:55:4f:7b:d4:3e
Fingerprint (sha256): 08:fc:23:22:a3:7c:e3:49:bd:59:91:40:4a:88:aa:d6:04:b4:81:31:9f:7e:9e:94:70:5e:db:18:d7:09:5c:a3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pastificiomaffei.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pastificiomaffei.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pastificiomaffei.com

Other certificates including the domain name pastificiomaffei.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for pastificiomaffei.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3kFo1vBLOVB6w5dN8k3k
d0SxxawZKW8JKEv2CACyCdVzKuSrqtTsuTpHAYWcPLctcRx/p+yLu5diQ0InSgxc
QBJYlWYG+U6P2QDnMDNfyNNdquPGQdmwu0aS4UOkeiCRzAPZBjBRwW1CpMppXkjK
yFH6Vp1gg0Z0Zj0JyEG/UQMo6oy5U8mIvAZqc+lvsvvH+4qGw1W3oDJ0sDrM9fdf
td7mfLOADy0zvbgPi/EHnMPPUXbH/Y8Vw58WlFpN4YCvqjICaNUuxqfmZ7Av8JyW
5oENauU38YZRJPijXVOBI7WVFOPvGhwuLgrDyxHKXAiYSgGpI2Bd1gnPRjGOCSrI
nqNByQdfljzeX0LpPxM44BqtZeXN9984WTtigG3MVMT6LZVxkVHqXAH0twHM3y9w
E6fCujS1S4AxB82Sx52feRwqbS7ZrKKE1c14eXF4029uCpEdji23ksGx7MMaFuor
0b5On36arS1PQFAG881HoLa+zPkJDdwgaqlfxOaYAqJrhOy7kunLlwF8QXM39N0c
C8opHBXSc2AtLEMbwj78L3m+bEarUCeD0yX0XazK8qN1yj1W7ZC6UcHD6rm9XgPZ
K3Dr+xidumNyH5CoH9WZyff25hF/whRMT4RSwwPfKfiiVaDV2tRuGIUvfJlRocpP
A3Qm+GUtvbMvVnzr516i2pkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284014495028411189529404344087325936523018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 21:47:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 21:47:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pastificiomaffei.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 906723356537369843083582297088410581654104288295871010725546700416973325202545630769850441181801180148407784078847278645324197520548830020430029374089638309351296048703774235180112622730036530105097992021463785160909021220057009891405660716964031253424252903921794501887340167460985356299095648403686256045097842128874393359589031244904760381376800114941740007675230599266685435014423058487546439410363893630842612200144684192115230595403226953857346392850024717294387695559845953152991381302722089438814372740033655389860669147207111822203239734304304678075867893318763101872165357500458571444895122438271639153741468472560422863323733453586073654662265144301381900262095552909746092390902655457832514694290379630507140576568879622470603925650936016695716098656712355881317875183140576163011738615680484856115916911852753316695592934775809826197323231620866798562812287730884252350153065454347465883915918635377990540568781662985295640395518905545065827071734207913829537183619620970776784139167511706370483493161254290911526719632537492885161254060054653208553458795112713637227282916193503661589009603240221341062217864786589863452413880657668954233932510967436710936789043611180535333239194222864609330763769412114867904168778393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cce42fa66ee92bffc174c7cd9c14ac190e9b6663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastificiomaffei.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c30775e710000040300483046022100dc6ba1430eba00b5b07c52bb68cdd6c3c009992965ce527ce522755065a7a157022100f553d23a7d94a044b9f0be2d31fe3d5fec98a947a22c0b5cc2d6dfe5bbcdbdc200770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c30775e640000040300483046022100d7ef0047e21bb56328337db3ed34613a5ab5afced288a43f0b33e27d7940dff1022100d799c6947c2b5a9f968cb3d86b9c3ff496ca3ccc8aa5ceafdf164d4f845937aa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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