sangiovanniteatino.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2d:77:04:a0:c7:e2:10:83:ca:85:e4:8d:1c:42:d6:bc:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sangiovanniteatino.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2d:77:04:a0:c7:e2:10:83:ca:85:e4:8d:1c:42:d6:bc:49
Serial Number (int): 276807766468430714425914131386727388331081
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 32:fc:f7:a3:63:40:c5:4e:89:0b:73:65:70:74:ca:1f:ac:b5:b7:85
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 94:97:8b:88:ea:dc:7b:43:b1:b5:47:3c:c2:f9:98:25:05:53:25:44
Fingerprint (sha256): 09:e3:6a:b1:2f:b7:db:d1:63:d0:f6:9a:57:f2:62:1f:d9:94:5d:10:5d:47:b1:07:74:df:a8:9d:b9:65:18:ab

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sangiovanniteatino.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangiovanniteatino.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangiovanniteatino.org

Other certificates including the domain name sangiovanniteatino.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sangiovanniteatino.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGZDCCBUygAwIBAgISAy13BKDH4hCDyoXkjRxC1rxJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjcxNjE1MDVaFw0x
OTEwMjUxNjE1MDVaMCExHzAdBgNVBAMTFnNhbmdpb3Zhbm5pdGVhdGluby5vcmcw
ggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDEhwTde1R60fQnkZV8zhmS
QeV5aTn7w9Qxd2q/UCvCcZem/JuhAK15TqyrAwYzC36cWmFPPYfaHfjK1U9kDMrO
0kdlfOJLAZCNx2jSnPxFHRssg8KAa0lKMU1zvBWpJ0/5YuyxSQlHjD6BZPqTgv95
5SX/Ui91JrM9tTOMu5yK9mAYZNwggoomrodlyyw8iMEb0VeOQ/4ZMTauUTvg2p7x
9OE6S3SJfDdaIAEBKIBaOwqskostH8GZJZ2dpiKMY35581kh4OmW08O/k0IGPm4D
fobj5R78ZqO0dzZJIk2xCLAdBUM0EyAKEc6LzmWmPOQup5m+vkWz9bNv2Mq0CEbG
NW9aPpY8ZCaJpwZHAyZj3BXmrI5ByNeBat7h/mIsCjU0X19Y06Kno4bo12wFUEja
BJYNn9i4CV9uKrvp+TMxhOF4ZmaRnJQ5MBFJLixXaoATeElnwTuaJzvguQ77qcTx
y2M1n8h3itOMmIA/TBum+S4KOrrqvOEJ1t54aWlLyt/ZFoSBnVKs85RUVVxKXzW6
J7MzXzEVTC2PxEUHQdzUWkDZxxHyMaZG2pi2SYNipVkj7qT8T26C5PZ2Fx5iMSTC
WwXNF8FrSqGn7iB1NTj6c4GRep1O70MuVHSKexRdzke9WmbZoXlF7fPenJW2l7Ef
bouYnzKrqgJOrQi0QQ7V8QIDAQABo4ICazCCAmcwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBQy/PejY0DFTokLc2VwdMofrLW3hTAfBgNVHSMEGDAWgBSoSmpjBH3duubR
ObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9v
Y3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9j
ZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCEGA1UdEQQaMBiCFnNhbmdpb3Zh
bm5pdGVhdGluby5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkG
jbIImjfZEwAAAWw0bcnQAAAEAwBHMEUCIQCAf614GsNh2SYAvE+RUz6venxkQaok
0XswwQ3O7+9zEAIgR0A9x/P+zJNWn5lgHBf090nXUrn3qf+j8E/12TMGYpYAdgAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWw0bcquAAAEAwBHMEUC
ICsCYqDcj/KsalwZXFUM2EompaZ/Ws66W+0N2Oi5zAgLAiEAzYRPUo5pB1jVgi+h
k4wrT3daa8xUtlEfOjplSoKSAcowDQYJKoZIhvcNAQELBQADggEBAJUy+Bfic1f/
63YxE+M1eb2594XMngcdni1S4sVA7eih3xMz0wbCUhQrwG+WoBHbcnivh3taGgrF
q/LidWgr748pFwRNwZx3cdfbi+yltA1eM3AG3AYAJWoAwA5/hYvMnLaapNgcsL1V
z46L8szYCP0O8tpRfow7Xq9Iml1ixdTP5TotsUZ6BONAzac8XwKkI7r4awV1SaNX
cjOXcc2SQNkCyfL2nVanvINyBzI/TIH3EUgQi8dwD36Gn980GW1hi3N5s3w+zA/d
VF6oCKmd1D3KtrdoRur/Ywo5TD8R2OPmVrjsgtZtnO9couBI1ZMLLXynZ8TbPHiJ
3JaosUEKn34=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 276807766468430714425914131386727388331081
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-27 16:15:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-25 16:15:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangiovanniteatino.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 801761914991927546746454580617957250211618000868927565101581280986057330784931164700314002245449297219775678267922531852664085262918964348844556150531498014667288194742055803569207385631758626686623790088082217997455600849836345358720423788185060445470289117538382089035580124368930390121878459491428088753488777934356094798635076109447649309252700453599918500699307303832445013547800881487570473281500620754371715261129220858298924036744851387143277240214645981735885748310935738529565418498900527787652592820406291072148416387356887738238711892816525304911717550994486236282288025573086994743389307762584001255357088501282187555757355245915423278758850387438981877775313775198728299116626911756381434772061172756202407246352078627966816351975821255010196302584444779992871322790545233336334450969414730700531772213346347422506327826313159259481133861719696785583239209761777174577151288490904556031429793798908373090971175991980498193083113645862375426121365068385448270117329544236962904965809084188269173836152041336783677550685339642066827767077973579336979308811806802647709163151171074747153745855659785463234145978137907082812305057663708519295465010114670375244577888107978590830149035581745238498254021931021435171102447089
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32fcf7a36340c54e890b73657074ca1facb5b785
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangiovanniteatino.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016c346dc9d00000040300473045022100807fad781ac361d92600bc4f91533eaf7a7c6441aa24d17b30c10dceefef7310022047403dc7f3fecc93569f99601c17f4f749d752b9f7a9ffa3f04ff5d933066296007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c346dcaae000004030047304502202b0262a0dc8ff2ac6a5c195c550cd84a26a5a67f5aceba5bed0dd8e8b9cc080b022100cd844f528e690758d5822fa1938c2b4f775a6bcc54b6511f3a3a654a829201ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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