spazicondivisi.com

Issued by R3

About this certificate

This digital certificate with serial number 04:93:ce:2d:18:49:56:46:44:b1:7f:89:07:dd:a7:1e:9c:60 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=spazicondivisi.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:93:ce:2d:18:49:56:46:44:b1:7f:89:07:dd:a7:1e:9c:60
Serial Number (int): 398744706777497454463901713369714105687136
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: a1:dd:c5:36:83:d7:3b:e4:38:ec:24:39:08:f4:20:fa:e6:e7:13:2a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:72:e2:27:6e:41:3a:86:c7:b4:97:64:3c:ba:a6:4b:82:34:66:28
Fingerprint (sha256): 12:11:a2:94:6c:72:19:be:b4:76:1e:47:37:03:66:22:51:3d:40:6e:18:b2:1c:9c:ce:8a:24:25:c9:16:9d:e2

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate spazicondivisi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spazicondivisi.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spazicondivisi.com

Other certificates including the domain name spazicondivisi.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for spazicondivisi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgISBJPOLRhJVkZEsX+JB92nHpxgMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAyMDExNjIyNThaFw0yNDA1MDExNjIyNTdaMB0xGzAZBgNVBAMT
EnNwYXppY29uZGl2aXNpLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoC
ggIBAOD/qrqBmnOnzk00E7mTCWl6cFsuycYvVvOpDBEaorvgBWgXNbIQkwl0iSou
auRneYqSHWiRGDos01Z916K0QeHuLaglASw7PVcYpj3CNUCI1IBT7criDuUacgj0
g6yHVRTeCtqrNq6EWMHcspPIGchCvaMVFjOnxxB3/2tDEUXipL7mGDCigQ19z3L+
inXI1WodEh1NJ49KCFPw60I5dObiJqIYuvvcBLnmljmuUt6meBpEyYPMcuvX4aNk
P9WbMZhjB0HQm5XaXVakzTL+ZlpHlxkB7zopPd158AO+K9GYg/dGty5wmUitRTSt
1/9Cze9NSkF7x8nQ0Y5ju8bHOmOwe+HuvvRfZ7OXobt2fiYQu/tE+dcg6q0kSLN0
v5o8HxidJ8oM8o2CdSKqg6jgWBQpKvexCIdnokSXF/RvwSKdRXueJjRmr4+Cdn+l
sdncf/Eh0Pv1Xmh2zXzAcn4Atu0HtJ2F0qKL1amwZc6Rxr4ze+1gkti76D+2WS4h
PuCn/Bzhrn+EHFPMBPSNmyayYRkfTa4z70i94Znwts0aQp/k+sg1pAJzUZlZzEcz
WDjsO9HQ/BPSESjBPczRe+gKgHH7R6Uf4gArczcxsSOclBzmIegNqE79fx59+cGn
AJ2Wpv+ksBg92iQ7HnkXRnJmt0d/9hH5QayotP8E54PydZ1NAgMBAAGjggIUMIIC
EDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFKHdxTaD1zvkOOwkOQj0IPrm5xMqMB8G
A1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAh
BggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZo
dHRwOi8vcjMuaS5sZW5jci5vcmcvMB0GA1UdEQQWMBSCEnNwYXppY29uZGl2aXNp
LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA
8AB3ADtTd3U+LbmAToswWwb+QDtn2E/D9Me9AA0tcm/h+tQXAAABjWWx+MkAAAQD
AEgwRgIhAIMddSec1AteTDijzlqyNbQVD+UBO26ga11T593hfaLpAiEAx6vVn5r9
vBrCShpgVhTe0QakQCgsaE2dJED3SOmcL+oAdQB2/4g/Crb7lVHCYcz1h7o0tKTN
uyncaEIKn+ZnTFo6dAAAAY1lsfkrAAAEAwBGMEQCIH3eh/MhVLfV8nZrG6ZUdhF7
0zjXcIJYm6nrT3//YSeqAiB7Bn4/vtr2nU/xq/wGtxBgfWSeW0be9b1MyTn4u43p
zjANBgkqhkiG9w0BAQsFAAOCAQEAtHKemqIiX/SJOZV2EOeNKGGYE6RZnMaQS2qu
9m1PRLz8niikOapa4mWkOgFU/oHttSouUpe9XpoRq1+kOqLRUebrCvEAOidcYHR6
rKx1DA6MpH2MwFw3O2ce/7p5SVp9rVlYYkJ047zm8RV0SF1783JKmKaFrMwoHAlw
pHmYZwYreTwu+KdAW77M2JIqKui98Hwnua9XjWdm+DY7xkyVRXBf57/P6GpfXBbv
cxTdsd4zNvARZ65d+KgSRoZBKJEH7Jb+w211V5AjwhjUDt7oz58/ikxq0bmw5AgL
sJkxDufGmG9w0o0jwSWnsV4KoPjv1EvbKO0dQes0NXzZ6affCw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 398744706777497454463901713369714105687136
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 16:22:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 16:22:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spazicondivisi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 917914607119628760597774217051448751238736493958024079036433921904034300743173432107228340305398759927079468546513002530882283857384536243967636156370710804372319659790899046028002920305515442494044631755881558996212385080474165300659332384494511694359942964250444114587493338581907768094600682181350734242839350183006056688615877492096126037236255003769019086191830223554289261596137156968417724504818986407361892320655519847572766704561709683159490251693608692880203980048058513519075542091679494340708993723819579862322690058610179910228854092862123755116148105176781527864780035622603697396235894371036981332267870032037798836207872241370600284942960409946956390075963779876356597708375527101878790493738040312887651752197677065091030771086980639298309059143225759156699107818133275295637117409476784303196088243179876931425271836246472561699319570017785084827961285122362229881548714276181400057730778595105002974334299587542242567837035542674912446583534406764079071110848356047548450638570182461088606641302763041499342543035546884746301142801459854307313839015682410244911789093652095488223731679798753796111663321035025349335712081135053762306337638085946122719245512635763383245862878844334739107156492120284943660147383629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1ddc53683d73be438ec243908f420fae6e7132a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spazicondivisi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d65b1f8c90000040300483046022100831d75279cd40b5e4c38a3ce5ab235b4150fe5013b6ea06b5d53e7dde17da2e9022100c7abd59f9afdbc1ac24a1a605614ded106a440282c684d9d2440f748e99c2fea00750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018d65b1f92b000004030046304402207dde87f32154b7d5f2766b1ba65476117bd338d77082589ba9eb4f7fff6127aa02207b067e3fbedaf69d4ff1abfc06b710607d649e5b46def5bd4cc939f8bb8de9ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b4729e9aa2225ff48939957610e78d28619813a4599cc6904b6aaef66d4f44bcfc9e28a439aa5ae265a43a0154fe81edb52a2e5297bd5e9a11ab5fa43aa2d151e6eb0af1003a275c60747aacac750c0e8ca47d8cc05c373b671effba79495a7dad5958624274e3bce6f11574485d7bf3724a98a685accc281c0970a4799867062b793c2ef8a7405bbeccd8922a2ae8bdf07c27b9af578d6766f8363bc64c9545705fe7bfcfe86a5f5c16ef7314ddb1de3336f01167ae5df8a812468641289107ec96fec36d75579023c218d40edee8cf9f3f8a4c6ad1b9b0e4080bb099310ee7c6986f70d28d23c125a7b15e0aa0f8efd44bdb28ed1d41eb34357cd9e9a7df0b