spazicondivisi.com
Issued by R3
About this certificate
This digital certificate with serial number 04:93:ce:2d:18:49:56:46:44:b1:7f:89:07:dd:a7:1e:9c:60 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=spazicondivisi.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:93:ce:2d:18:49:56:46:44:b1:7f:89:07:dd:a7:1e:9c:60Serial Number (int): 398744706777497454463901713369714105687136
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: a1:dd:c5:36:83:d7:3b:e4:38:ec:24:39:08:f4:20:fa:e6:e7:13:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 62:72:e2:27:6e:41:3a:86:c7:b4:97:64:3c:ba:a6:4b:82:34:66:28
Fingerprint (sha256): 12:11:a2:94:6c:72:19:be:b4:76:1e:47:37:03:66:22:51:3d:40:6e:18:b2:1c:9c:ce:8a:24:25:c9:16:9d:e2
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate spazicondivisi.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spazicondivisi.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spazicondivisi.com
Other certificates including the domain name spazicondivisi.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for spazicondivisi.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgISBJPOLRhJVkZEsX+JB92nHpxgMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yNDAyMDExNjIyNThaFw0yNDA1MDExNjIyNTdaMB0xGzAZBgNVBAMT EnNwYXppY29uZGl2aXNpLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC ggIBAOD/qrqBmnOnzk00E7mTCWl6cFsuycYvVvOpDBEaorvgBWgXNbIQkwl0iSou auRneYqSHWiRGDos01Z916K0QeHuLaglASw7PVcYpj3CNUCI1IBT7criDuUacgj0 g6yHVRTeCtqrNq6EWMHcspPIGchCvaMVFjOnxxB3/2tDEUXipL7mGDCigQ19z3L+ inXI1WodEh1NJ49KCFPw60I5dObiJqIYuvvcBLnmljmuUt6meBpEyYPMcuvX4aNk P9WbMZhjB0HQm5XaXVakzTL+ZlpHlxkB7zopPd158AO+K9GYg/dGty5wmUitRTSt 1/9Cze9NSkF7x8nQ0Y5ju8bHOmOwe+HuvvRfZ7OXobt2fiYQu/tE+dcg6q0kSLN0 v5o8HxidJ8oM8o2CdSKqg6jgWBQpKvexCIdnokSXF/RvwSKdRXueJjRmr4+Cdn+l sdncf/Eh0Pv1Xmh2zXzAcn4Atu0HtJ2F0qKL1amwZc6Rxr4ze+1gkti76D+2WS4h PuCn/Bzhrn+EHFPMBPSNmyayYRkfTa4z70i94Znwts0aQp/k+sg1pAJzUZlZzEcz WDjsO9HQ/BPSESjBPczRe+gKgHH7R6Uf4gArczcxsSOclBzmIegNqE79fx59+cGn AJ2Wpv+ksBg92iQ7HnkXRnJmt0d/9hH5QayotP8E54PydZ1NAgMBAAGjggIUMIIC EDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKHdxTaD1zvkOOwkOQj0IPrm5xMqMB8G A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEnNwYXppY29uZGl2aXNp LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA 8AB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjWWx+MkAAAQD AEgwRgIhAIMddSec1AteTDijzlqyNbQVD+UBO26ga11T593hfaLpAiEAx6vVn5r9 vBrCShpgVhTe0QakQCgsaE2dJED3SOmcL+oAdQB2/4g/Crb7lVHCYcz1h7o0tKTN uyncaEIKn+ZnTFo6dAAAAY1lsfkrAAAEAwBGMEQCIH3eh/MhVLfV8nZrG6ZUdhF7 0zjXcIJYm6nrT3//YSeqAiB7Bn4/vtr2nU/xq/wGtxBgfWSeW0be9b1MyTn4u43p zjANBgkqhkiG9w0BAQsFAAOCAQEAtHKemqIiX/SJOZV2EOeNKGGYE6RZnMaQS2qu 9m1PRLz8niikOapa4mWkOgFU/oHttSouUpe9XpoRq1+kOqLRUebrCvEAOidcYHR6 rKx1DA6MpH2MwFw3O2ce/7p5SVp9rVlYYkJ047zm8RV0SF1783JKmKaFrMwoHAlw pHmYZwYreTwu+KdAW77M2JIqKui98Hwnua9XjWdm+DY7xkyVRXBf57/P6GpfXBbv cxTdsd4zNvARZ65d+KgSRoZBKJEH7Jb+w211V5AjwhjUDt7oz58/ikxq0bmw5AgL sJkxDufGmG9w0o0jwSWnsV4KoPjv1EvbKO0dQes0NXzZ6affCw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4P+quoGac6fOTTQTuZMJ aXpwWy7Jxi9W86kMERqiu+AFaBc1shCTCXSJKi5q5Gd5ipIdaJEYOizTVn3XorRB 4e4tqCUBLDs9VximPcI1QIjUgFPtyuIO5RpyCPSDrIdVFN4K2qs2roRYwdyyk8gZ yEK9oxUWM6fHEHf/a0MRReKkvuYYMKKBDX3Pcv6KdcjVah0SHU0nj0oIU/DrQjl0 5uImohi6+9wEueaWOa5S3qZ4GkTJg8xy69fho2Q/1ZsxmGMHQdCbldpdVqTNMv5m WkeXGQHvOik93XnwA74r0ZiD90a3LnCZSK1FNK3X/0LN701KQXvHydDRjmO7xsc6 Y7B74e6+9F9ns5ehu3Z+JhC7+0T51yDqrSRIs3S/mjwfGJ0nygzyjYJ1IqqDqOBY FCkq97EIh2eiRJcX9G/BIp1Fe54mNGavj4J2f6Wx2dx/8SHQ+/VeaHbNfMByfgC2 7Qe0nYXSoovVqbBlzpHGvjN77WCS2LvoP7ZZLiE+4Kf8HOGuf4QcU8wE9I2bJrJh GR9NrjPvSL3hmfC2zRpCn+T6yDWkAnNRmVnMRzNYOOw70dD8E9IRKME9zNF76AqA cftHpR/iACtzNzGxI5yUHOYh6A2oTv1/Hn35wacAnZam/6SwGD3aJDseeRdGcma3 R3/2EflBrKi0/wTng/J1nU0CAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 398744706777497454463901713369714105687136 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 16:22:58 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 16:22:57 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spazicondivisi.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917914607119628760597774217051448751238736493958024079036433921904034300743173432107228340305398759927079468546513002530882283857384536243967636156370710804372319659790899046028002920305515442494044631755881558996212385080474165300659332384494511694359942964250444114587493338581907768094600682181350734242839350183006056688615877492096126037236255003769019086191830223554289261596137156968417724504818986407361892320655519847572766704561709683159490251693608692880203980048058513519075542091679494340708993723819579862322690058610179910228854092862123755116148105176781527864780035622603697396235894371036981332267870032037798836207872241370600284942960409946956390075963779876356597708375527101878790493738040312887651752197677065091030771086980639298309059143225759156699107818133275295637117409476784303196088243179876931425271836246472561699319570017785084827961285122362229881548714276181400057730778595105002974334299587542242567837035542674912446583534406764079071110848356047548450638570182461088606641302763041499342543035546884746301142801459854307313839015682410244911789093652095488223731679798753796111663321035025349335712081135053762306337638085946122719245512635763383245862878844334739107156492120284943660147383629 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1ddc53683d73be438ec243908f420fae6e7132a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spazicondivisi.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d65b1f8c90000040300483046022100831d75279cd40b5e4c38a3ce5ab235b4150fe5013b6ea06b5d53e7dde17da2e9022100c7abd59f9afdbc1ac24a1a605614ded106a440282c684d9d2440f748e99c2fea00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d65b1f92b000004030046304402207dde87f32154b7d5f2766b1ba65476117bd338d77082589ba9eb4f7fff6127aa02207b067e3fbedaf69d4ff1abfc06b710607d649e5b46def5bd4cc939f8bb8de9ce . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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