www.allegato.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:2a:0c:33:3a:cb:6b:02:05:4f:14:00:f6:e0:65:3f:13:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.allegato.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:2a:0c:33:3a:cb:6b:02:05:4f:14:00:f6:e0:65:3f:13:d0
Serial Number (int): 275644933941545551013182967651305974076368
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 25:7f:b2:db:92:26:87:5a:4b:2c:f0:3f:55:a4:fe:fb:c0:18:bb:77
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 36:73:b2:23:18:e5:6e:5d:54:8a:c4:ba:05:48:cc:7a:4e:a3:0e:43
Fingerprint (sha256): 09:fc:5c:3a:cc:2a:10:2d:58:ab:44:71:fa:f8:68:39:25:89:5e:18:a5:ee:e0:b6:9a:03:ad:86:30:19:01:d0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.allegato.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.allegato.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.allegato.com

Other certificates including the domain name allegato.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.allegato.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAl0iZlTVYTSR/dkiN5oTD
B5v2feDSa1F8hIq3FoFOfNzw2f2yQT4yRZIpgT7ctnbJWqkiotBAydsMVEloddQX
ACktt5y9kjZz7EQndwtr5qPaEcVRNTJNb7+oAJurGK3aG/3CeMFFlFzH9EqarZX8
7fNP/eAphj/7g8nUJ1ChzZcNN2qNY05gd0FZ3jEvwtIh6ma5c07q2n9G4C+5AkOX
msJ6XoE4Y6BnX1I1UwjFBX2xL/2VfggxqKKbQ51zFro877gFn6PNKjcccyaQI8sl
/grUX4kgZdPrS/boALXV7LshTZgMVK1bjFaNGtouZXNmMMzrRLSaISYXvYW4TDOq
u2UZuNE/Whcsewzu5pLICO+hmG+fGbrOajZZ64y12Hg3IYYxx7btuIxFqey/yrT3
oeeUMD2Q2pgmnmF5WBIUbwgFFrdOyi+ltQ/zAl+Mtuv6NrASdJdBJawN56ozPBjV
mg6i9FaZliBv2m7WT+vnicY0yzTY6ti5Tx607M89sL7f33NADGlyVEi6QDf7wRnw
DJwa15h2IenLfnDTtZb6Qm1YVn0cMF1EyVOVZHZfYdK3GNrmNP4lXOWhNLnncbQ6
W3EoHJhM0iz/wNPzPqvD14ni5LzKvZvUEFGVo8tHXhCX1EFmUdl6fLnxrZlC4XhD
WE3cM/nNqbHZlB3Ir2q50NkCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275644933941545551013182967651305974076368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-08 11:06:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 11:06:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.allegato.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 617183214763062414280949673619123192447959463822843333218629763360758016971712148773955274515578649645409934193727870188303588815390369796006986131294226505621013322626610570153962557389700046438905254548264760947180526412437762332215205687159538487210137141378173028449827396687868818728819905788034988140157606124061465088344571197254032195802600865959690275667707566851863725908489936365235215089291446076523659128227817228757912981283322974868277850365029528452621466028341835932311092938725135630625877530429476847691127041680262313068093671425647364775834331052201385072312671273949893417079230976849835054135384306738428775159391883177996555920132129571504574598603118741089389471656826308400316728352197748043389469726891891918451788832931705599604792219813682054064426671541170552034736388703919982670188102958642416643391600197791725590357333981627133236431614369951565758438712444326085263361193291839554343943703213092980451936695130837988728264215524661835921130932569959605786407512578275473585461974107618065933215356503226276714473178993373427213419325107838108245925431337130258966864392918934560713788670563074363809812949298221667539724235003126349449077326366648637752005165788587226035115545135917129198728761561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							257fb2db9226875a4b2cf03f55a4fefbc018bb77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allegato.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ee56739b6000004030047304502203ad908b2d9ccad70e7ca8f4c250f320f04644a90ef12af4c893d96dda5d1bd56022100e27a6d2097bc6a9d0414a72fc57280a8e2789b6337fb27b5c589550539e4f82a0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ee56739c8000004030047304502210097a0408b54cd9badd30f6a62ad3df62af62c013f3e0089e55e0073c13dec4a5c02207909a0a559f6b9f974c68d630cbe550cfb67c780151acf973d201e3ad2f61d04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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