www.lettura.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0d:13:0e:e3:47:76:ff:ed:32:d6:67:8f:5f:d6:f7:84:79 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lettura.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0d:13:0e:e3:47:76:ff:ed:32:d6:67:8f:5f:d6:f7:84:79
Serial Number (int): 265785861199097881048891057937501547627641
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 93:a5:3f:1e:27:04:51:7b:bf:5f:2d:56:27:27:5c:60:a9:56:e3:ef
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:b4:7d:dc:16:57:d1:7a:15:8f:1a:ab:50:ac:c4:36:f0:6f:86:db
Fingerprint (sha256): 0b:aa:67:b0:c7:0e:12:67:5e:1a:25:6d:97:5a:50:b7:f8:46:6d:d5:67:8c:65:5f:c6:a1:aa:24:74:0c:3d:62

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lettura.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lettura.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lettura.com

Other certificates including the domain name lettura.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.lettura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265785861199097881048891057937501547627641
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-25 07:25:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 07:25:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lettura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651364667822752681100449909969163615806060526588524551599618824752307368439589010685291974320373467971926992252642360294913382701418512860322731229403651034986240490030096884634715187838666588179386541927031491704511253367395442871751360016386328198809032444118475139592234319239491464729808266636645976871410876568884734984695518518780969273415392337948046576111989182716923437273040008846417315434942994522921749639681138166959658392215669034801033537972097878381124089955852323836442060994132842905790355104877676796874653160592362655866685255870360190742789890321337119934482186734916180274473363446300741546627638822593699620920092727280753877653194776269324939324409390819584041104634832139736900466987099808901095139904143897463821219952340782489387866622512021027907675638010722580498634025279297437459878786121243605616814672425748916385861116170648119132221438087038941955032077611198098499787823459266779416580757761758883684335287487568654086177532881263357950098856670190930582844570553982043241759199305508514716961833548230161046596051318949287375882574786752141988873491985551956177038461366244858818531697166582189796740422652151974037921163665084020175977224548279390116010712627903875066335544678404877237859667297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93a53f1e2704517bbf5f2d5627275c60a956e3ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lettura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016aee17e55c0000040300483046022100b48326ff001d56ef9469b68b0d4d7472e243c58f76e4b249e59a52caf5b03eda0221009116570f8959b428bea66ed19571c42503512fd06b92f7e88c55a1fcdcb31ab100760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016aee17e57d00000403004730450221009eba725cca0cbe3b7d89a33a043ac23429846a00799e7439db871aa6b4f1d5ab02200736b4d7dc0f32e0de3c86aa9dbaf2ab5989d6f955315c869d224d1b16750520
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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