sangervasiobresciano.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:51:02:8d:f5:c8:d7:36:ae:1d:52:b5:fc:eb:ba:7e:72:2d was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sangervasiobresciano.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:51:02:8d:f5:c8:d7:36:ae:1d:52:b5:fc:eb:ba:7e:72:2d
Serial Number (int): 288903125070827969501697125434437924713005
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 85:02:7a:9f:9b:80:71:a8:35:ce:c3:67:05:65:0d:d2:03:71:fc:0b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ab:e5:0d:e4:65:b0:fb:13:dc:6c:3f:03:e1:74:46:72:d1:8f:fb:a0
Fingerprint (sha256): 0a:d6:1b:43:8a:01:6a:ef:a9:af:fe:9b:40:a9:f9:9c:42:40:93:b1:96:b5:cb:41:ad:9b:4a:82:7f:79:68:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sangervasiobresciano.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sangervasiobresciano.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sangervasiobresciano.com

Other certificates including the domain name sangervasiobresciano.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sangervasiobresciano.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA5kpdfmD73L1smOGhhbRU
HHcLRYF8CRO+XXqC5O8xtYzV0FmDMUYbfhBBGx/WnCHC7PW/NerH0V43cZzu9RuA
RnX9IyVnuUKhjW4SRJru5wzge83KrdklzHPXjpN4+eW4UgpYXp95n5+Ndxrd87z+
tgfN+Deq01jZ6ETlrLJOAWMia7iCiI5lK+0b8PLKR53S5Vdi9ar11suaB2XXSd/2
l92zWLo/S/4r2myIBgNss1s/1sdJwGhJQq9YJ+g1FNmE69LehP2yOLQNu2F+aI/1
JldEAZ8jJCwxeOIKBPSR8xHafedTZ9fq03i8SBe6bEoDEPy67CKYkNeoMqkeaMHd
W3jEhdBaVPde5GfpWK/2srViqUx8ezuSYPTXSGgie4m+lFs+D73bAVvDH+5j4aKf
vuSHQQTgbP4apRyX4CSji6rCsOAK2teWBZzXx34u2W7SlgOkc6jNc2m3rsIu2ejb
Hqzia3UpDDHP86LTYh33D84f57tQataljx5yMOAiKP920mvHopKws8FEZv8w/M/m
C3DleWmQcItGXjjGaVrjDtb+LCT2BD9ic/l0GO5jzYGTXWmDrRFQWwWaxWwsUrZk
Du1Sw8zq2+jR+M7Jp8FR0GvOE78/lgBiIucPLYMMKeS18imrg8SzYO9aYEtI4FNy
/fCJiuz5ddXa3huDG/uXcYECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288903125070827969501697125434437924713005
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 11:00:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 11:00:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sangervasiobresciano.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 939503227778876020328333029596404156183315227762644633489580865057843539881027004028665778960938157088691131939851219150020948198384335894302795798037978887860427724774676062502296817874908787234134522561625709557623401143107179715656915116467710951147722157510012862246157151942831563219323683080430465962775646763187972360899452969359309992019133621059776863295330886020156389183996679961507506303072332726749842291182106021513572353972307192595892632889939903374749273757983896941739390633674046623983148094396120288104105554325370085846039544449078280466896459283115274134284435672767425895038945792986189685610770939622307116557013308054302526271469318256690273939415834005868922254553663340811981370139193324617429994651141818406769909627603141868044881901090016123286788787187691257894854890425306578773815037484760937748149962702550954580360865688619134607720842564105714194375025774883643279220302027490719216670072904563494459646877947378578847012877496020191847492862339095626651395906631655699051936809839153150294166001043559767160051077096246521299808457463993495820258680504786024930939783491805092370913716049816767845021193644328415618098231190713055370628296567286682941574103772188499233583678055526695944865673601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85027a9f9b8071a835cec36705650dd20371fc0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sangervasiobresciano.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af929f31b0000040300483046022100aae6ca6e89e61c219560d83c6bdad84be0a9c49319aba30d1a93fb12ce0006b7022100cce4fac7151bd2749f9186173329170a755664fe6c9fdbc39604eb4ddb20ae1d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af929f38e0000040300473045022100f415d6db5e0954827336e3c13613dd6027783916dbdb4df2d9712efd0759dc9f02203f86d4bca8533e03efc35ed3cc1d94ac76399e93da142fde0911fcdfc0ca36f4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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