zucchinegrigliate.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:59:e8:82:68:ea:fa:c3:f2:82:a1:2f:54:15:bf:c8:3c:13 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zucchinegrigliate.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:59:e8:82:68:ea:fa:c3:f2:82:a1:2f:54:15:bf:c8:3c:13
Serial Number (int): 291931046472845570144541551157259660704787
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1f:73:f2:7d:9e:1a:d5:de:74:ed:86:ad:62:9b:12:bb:80:d4:6c:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 71:ac:1a:b6:be:96:e0:9e:2c:10:81:bd:73:00:49:b7:98:4e:46:74
Fingerprint (sha256): 11:76:be:4d:59:41:27:71:c2:de:29:57:98:51:a4:29:aa:48:47:6b:66:35:3c:42:b8:6c:1c:bf:29:84:0d:3c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate zucchinegrigliate.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zucchinegrigliate.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zucchinegrigliate.com

Other certificates including the domain name zucchinegrigliate.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for zucchinegrigliate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgISA1nogmjq+sPygqEvVBW/yDwTMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAyMTUwNjQ0MzZaFw0y
MDA1MTUwNjQ0MzZaMCAxHjAcBgNVBAMTFXp1Y2NoaW5lZ3JpZ2xpYXRlLmNvbTCC
AiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALYWoNY6XJr6wxUnPBWr7pdz
aJFCXZsKD2xt73R6ZFx0SXlU2UOYN6NQkfoUVXJhnK1ehn+bUiaPpYj56n4f2nkM
xjRL6EhNyckQgStJOQa56EA5iv6kfybXBmsE3fh04FhSAymwot+MKFZQ8YcFij5F
MtkMdFPxCW5yjg98WBuTF06AR+aR2kU49kybpsrT5qV4YCsCcqjMilUCx8sv/GvA
ZkDIAD+2pFQKkQsYcgcXuk9Ij4iac1RBYOlZiCnoZkRfqCJiPv/yMLxmTDNjWgeK
/4QGfhC9Lb1y/Muy7Aj9KORwqFpcRW27o01Y81M3I/DCoQ985WwqK2HnQtpC/aOJ
7fae94lZsj84YV4Ek/R48R5rAgUsO9w7dYXrZ2NiGdSG+Hdg6llstQJYPcBBQpOp
ixvLz/rJRhxLYc5TXa86eLUZcBj1yKZjmgSG9sP82oHdZVxRjUh4YdwYwJCzbluY
2AAIkpD1vn3FLdU4yq2HGyRU/vzipQhs2MK2I5FxyQYqP9x9IZpwtg0pH8Dv6xBg
OmlZWwN0Xro4yKh0HcxqwcSQPtjIhnbWytK4XOiIEJGTBoY/u6HuSxjk26PB1hnY
p7MIh0Z92/RtO9Ilm5Wak+Zr2Gqctvxd+sbRmn4+hCsbu/jnrgDDBdbwFzESIiIe
53WYHcDFKrv/Kv5jmIanAgMBAAGjggJrMIICZzAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFB9z8n2eGtXedO2GrWKbEruA1GwPMB8GA1UdIwQYMBaAFKhKamMEfd265tE5
t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29j
c3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2Nl
cnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wIAYDVR0RBBkwF4IVenVjY2hpbmVn
cmlnbGlhdGUuY29tMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBQYK
KwYBBAHWeQIEAgSB9gSB8wDxAHYAB7dcG+V9aP/xsMYdIxXHuuZXfFeUt2ruvGE6
GmnTohwAAAFwR85vmwAABAMARzBFAiATB/LpMgcj4OzwaJM6wKFo9rp1F59s5E+4
IOck2jAHZAIhAMW43hxlc1sojv7j1W1oOkmRLzyGx8u7QDNUL+duWPLtAHcAb1N2
rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFwR85wnwAABAMASDBGAiEA
pEyVsUkJHeWcKnHLkVTU9lS3TEyT2Q36csBkPk8DJCMCIQC8pc2JwcucoYAfuFK3
wQRHMN2TAORNcBA1d5PZ/Z8O9jANBgkqhkiG9w0BAQsFAAOCAQEATyffpxmB1d2e
yFhBvG2Ud9xQYSMdKKitNAZzd80EtGEq5pNmxwwM81od5dPVLuB6wkGGkTAjhIyr
pM80FF7kMSAaoUkXDOEBOfXvPkECAyZrn/4rbaPOa4EtZcIzoRLKFp1Cg9iTrcTa
OZaFd+LewS7M3fSfN00VrwNnHaSS5NvBAdWtF31aZqniAImO0qtZ3PvjYcmjqUXv
fZZQEb8IbKvpzqJ1Q2hjAmc2e559COE2OMGWgfeDizuy06qvxa9nNXFsHbMo2C6F
UsgKWfzewINae5sB4I1dKTrHaxzavl2WOfZXYu2rSJdlTJQrCfCaoL+q9dYwrhnx
X6nJan+Nwg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAthag1jpcmvrDFSc8Favu
l3NokUJdmwoPbG3vdHpkXHRJeVTZQ5g3o1CR+hRVcmGcrV6Gf5tSJo+liPnqfh/a
eQzGNEvoSE3JyRCBK0k5BrnoQDmK/qR/JtcGawTd+HTgWFIDKbCi34woVlDxhwWK
PkUy2Qx0U/EJbnKOD3xYG5MXToBH5pHaRTj2TJumytPmpXhgKwJyqMyKVQLHyy/8
a8BmQMgAP7akVAqRCxhyBxe6T0iPiJpzVEFg6VmIKehmRF+oImI+//IwvGZMM2Na
B4r/hAZ+EL0tvXL8y7LsCP0o5HCoWlxFbbujTVjzUzcj8MKhD3zlbCorYedC2kL9
o4nt9p73iVmyPzhhXgST9HjxHmsCBSw73Dt1hetnY2IZ1Ib4d2DqWWy1Alg9wEFC
k6mLG8vP+slGHEthzlNdrzp4tRlwGPXIpmOaBIb2w/zagd1lXFGNSHhh3BjAkLNu
W5jYAAiSkPW+fcUt1TjKrYcbJFT+/OKlCGzYwrYjkXHJBio/3H0hmnC2DSkfwO/r
EGA6aVlbA3ReujjIqHQdzGrBxJA+2MiGdtbK0rhc6IgQkZMGhj+7oe5LGOTbo8HW
GdinswiHRn3b9G070iWblZqT5mvYapy2/F36xtGafj6EKxu7+OeuAMMF1vAXMRIi
Ih7ndZgdwMUqu/8q/mOYhqcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291931046472845570144541551157259660704787
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 06:44:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-15 06:44:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zucchinegrigliate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 742855826953187264645024484864461817300471836581334311662673010753987288996281690782654873485909175999415513005018839644556053774519247365886002438702780618248709174818192121098572335303539551393327151176590193683663658786487322949203854596523897351372105656578850082895989991812247669345030311699166075332179029572701567347587877667476998816708353401962115662687652409371808876928745555448149680846149625949305569040562830162795930634253935564027833824586323996049291553407986268137356001979695699727347270563679094509741112085523293361574517128612810993594745631564697327927033237410110921274847231812414535530056625685232343068935485370296278384630773653338475443791993820275681326251145095213292236397819501196474212336807505057386190389258320455105526536239066244492245263585075064577104601415434342923236533636697606926101287970254515549579929284684949085864848656437349800778285043319489916908005486200569608239491285040485371386828044096795419404991741045453267705846170970869004527789663471981647405809164903859459350844622490768361450512475040082027653408961662798716740576405405162793282561690413172536500711866235629596953778398298335143079727172993196258157013894114608200006791290028475677818361702649650493567228479143
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f73f27d9e1ad5de74ed86ad629b12bb80d46c0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zucchinegrigliate.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000017047ce6f9b000004030047304502201307f2e9320723e0ecf068933ac0a168f6ba75179f6ce44fb820e724da300764022100c5b8de1c65735b288efee3d56d683a49912f3c86c7cbbb4033542fe76e58f2ed0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000017047ce709f0000040300483046022100a44c95b149091de59c2a71cb9154d4f654b74c4c93d90dfa72c0643e4f032423022100bca5cd89c1cb9ca1801fb852b7c1044730dd9300e44d7010357793d9fd9f0ef6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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