ordinedivendita.com

Issued by R3

About this certificate

This digital certificate with serial number 03:d0:db:8a:ff:54:52:47:8f:31:82:18:37:81:62:85:a5:f5 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ordinedivendita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d0:db:8a:ff:54:52:47:8f:31:82:18:37:81:62:85:a5:f5
Serial Number (int): 332407412761574393585756665020438456673781
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cf:37:75:71:ae:a6:c8:f2:23:b4:f0:15:af:77:44:5d:21:fd:44:2f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 15:c5:9f:74:05:8b:29:5b:3c:61:eb:5f:98:22:fe:e7:cb:ed:7f:b7
Fingerprint (sha256): 0f:17:44:d7:4b:cf:b0:f3:d5:25:01:26:d3:bf:5a:bb:5b:55:5f:87:e7:d6:5c:3e:59:d5:a3:39:d4:fa:b5:4b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ordinedivendita.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ordinedivendita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ordinedivendita.com

Other certificates including the domain name ordinedivendita.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ordinedivendita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332407412761574393585756665020438456673781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 12:21:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 12:21:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ordinedivendita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905662266323224207026139329623135179229088998848437586918381119888823387372554941356666969528092207169713016052133701338084830986448863598250915941258172571703964462895333086145023256932854503526539765793139285626274211093547081591030284134683105893232299228474536731945873798964666493574509974372621181768191256061028169437555437370850621449447015189843245987354926500488524501464137847277178203523290436235025761301851387738308417967822416045915097290001962840855010095302092511060277991851433333997487294744391988609428845903939553325380711942115808366673510237158710820599863217656771896766717419746128995456115696149753523847538248348239993389552774833314533673229422543177622091809294023414593261633457231009875744035002226388206196470442811807831846316211487700914381555623601284269941233848519632435223842804251873374894266231638761394670833081020114124562984411763792390748479365239207830190413997579320936951854392566754037362682424457830917501324243943038228288131307752289243416304575201100303521267586154083584363910304896341026568157706831856062937249063655803621287568721468770521901533607219808816587829232773430401706263524876419269680505945362472408606900246470283553943434144845252761021759650197588356246310255081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf377571aea6c8f223b4f015af77445d21fd442f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordinedivendita.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018deaba1d5800000403004630440220597bf52fea3cf71e6a0cc9652a12f6eff845d99feee25567966db7b30c39207b02207500aaa966d2e018c7e5b725f0b9d21f04239868deee593c18aae7bc496030d3007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018deaba1d68000004030047304502206c0d8100f4bf8df7ec8832afcf37fb346eac957b867c5a4ce2a07d3f5dc7e574022100827307277f344e86146e2954453855f087a9accc072437139485a9deac41b87b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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