frascold.it
Issued by R3
About this certificate
This digital certificate with serial number 04:f8:7b:31:64:ae:9a:53:92:46:7c:1d:2a:1f:03:30:71:c1 was issued on by Let's Encrypt.
With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=frascold.it
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:f8:7b:31:64:ae:9a:53:92:46:7c:1d:2a:1f:03:30:71:c1Serial Number (int): 433002922231535760750103741141626255339969
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 07:20:d0:5a:46:7d:ff:b0:12:d5:cc:32:80:f5:e0:fc:6b:11:a4:fb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ea:5c:b2:12:93:26:ca:58:0d:91:4f:5a:21:ab:ac:2a:e0:70:3c:1e
Fingerprint (sha256): 12:22:04:a4:f8:eb:4a:fd:5d:1a:68:2d:81:1a:c7:e8:3c:1e:8b:a6:49:ae:d2:d8:11:04:a0:af:4c:eb:01:40
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate frascold.it
5
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for frascold.it
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
frascold.it
frascoldindia.com
www.frascold.com
www.frascold.it
www.frascoldindia.com
frascoldindia.com
www.frascold.com
www.frascold.it
www.frascoldindia.com
Other certificates including the domain name frascold.it
(limited to 100 certificates)
Certificate
The complete raw certificate details for frascold.it in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgISBPh7MWSumlOSRnwdKh8DMHHBMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA1MDMxMjMwMDlaFw0yMzA4MDExMjMwMDhaMBYxFDASBgNVBAMT C2ZyYXNjb2xkLml0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn7VQ VOVIFe0HtSvKa/ukAS4XVt1PRZnEkUXEH/nfNbJX/N0xYyEA13It4zjILftvLCcP VtfVckYhMqfLnX2RbzD9Tfn1tqsjySwvDTwE1tiYGkJvMdxGF4wMWeQ/vNrLGn/2 oejm6cWQOtcpR4m9xxpZ3GTqfbtF9u64crt3xaSpWRMagP2OGR5p4ruRyuKpj9KA Az2beKc54hUwmGD+dZclQYApn5umM46MunITSn+TyslwapA3IgixoMGMWmpsq9pc nCEyPNLaLcvXcVcB0dd3f6/krZsREqf7ZT1H7tJiEgLc9ucPlOxSoydErC+hNKvw Zc+hTlGUBLFXuH0EwXiDMLe6RWmvly8Nmhr15QnvpQjmQuPrH1IKO1JgE0X+xFsn zgUW821f8VHS5hjy2TRGeLZ3rkWkMWVAxOa/IKmpy4ZV0p7CVypuPXV2grz1/tO6 Cb7+GB562CxcOnII6dAeGnRuZq/+W3Wn1F159fG1TaAfVWqCq8ePT5yYLMlbe9Yq r6qBAQe1RcJMOcjBPZBZDtdbNeupYlCLRQJZvNMnI//+T8oitJFliOhyBRrmzbuy xAsNPdRoMIQX51w8eMMJoOD4qkrJnubWVjEF2RxH/OyQmayVbU22X8DYJEhuEvN7 HngFqz+m5QSqsqbTSCP8lyCsPjXYkp+PU7mnqZcCAwEAAaOCApIwggKOMA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUByDQWkZ9/7AS1cwygPXg/GsRpPswHwYDVR0jBBgw FoAUFC6zF7dYVsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUF BzABhhVodHRwOi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9y My5pLmxlbmNyLm9yZy8wYwYDVR0RBFwwWoILZnJhc2NvbGQuaXSCEWZyYXNjb2xk aW5kaWEuY29tghB3d3cuZnJhc2NvbGQuY29tgg93d3cuZnJhc2NvbGQuaXSCFXd3 dy5mcmFzY29sZGluZGlhLmNvbTBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y ZzCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB1ALc++yTfnE26dfI5xbpY9Gxd/ELP ep81xJ4dCYEl7bSZAAABh+HOWnQAAAQDAEYwRAIgKDvb6ZCXn0XorlGN7NZhLXWg 9qVSsBxVfZucgcOrC6cCIEKfZA1n+7saRfwhpFfpdw6pIOMqeUIpqCQli1V0M61s AHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGH4c5afQAABAMA RzBFAiAUNpFYJLLBjMqB5g/uMvqNlSv6Qlx5jjgzyxttWn2mqgIhAJhplsr2BQRZ nY/y4VAoKHTM+tnMqq0Is9stkR8MSVnXMA0GCSqGSIb3DQEBCwUAA4IBAQAVpD/M S11ek4kbL3KU3bRDnigvUN3S1paKIzuWUYTPFuzlf2j+LKZHu85ekHpn3gVDNwri m6nb+woKn+11GCQs3RuPIfBBZhfNfW0OhaiCGfVf7KGVNp5py3/iHwVJUGyk8Um0 uNpVHs6h3wOt1ixx0EdbzhGW6S5oMoSUHnvCjYqiazMqksQBbPLCa6JYiHTy2N9A uzIYaJi16jatUfAXCigdsThSnCd/s0v1J7tzwt44hN1lwB28A5GIAcBA+PItomQG jGeuIkOTBVLDNULV7WzUdEyR2YZVcVtlo9LBGpFK2nlWvPjK2QqhBPrLlWCQlKRc gw6gIOFb0Fuwrll/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAn7VQVOVIFe0HtSvKa/uk AS4XVt1PRZnEkUXEH/nfNbJX/N0xYyEA13It4zjILftvLCcPVtfVckYhMqfLnX2R bzD9Tfn1tqsjySwvDTwE1tiYGkJvMdxGF4wMWeQ/vNrLGn/2oejm6cWQOtcpR4m9 xxpZ3GTqfbtF9u64crt3xaSpWRMagP2OGR5p4ruRyuKpj9KAAz2beKc54hUwmGD+ dZclQYApn5umM46MunITSn+TyslwapA3IgixoMGMWmpsq9pcnCEyPNLaLcvXcVcB 0dd3f6/krZsREqf7ZT1H7tJiEgLc9ucPlOxSoydErC+hNKvwZc+hTlGUBLFXuH0E wXiDMLe6RWmvly8Nmhr15QnvpQjmQuPrH1IKO1JgE0X+xFsnzgUW821f8VHS5hjy 2TRGeLZ3rkWkMWVAxOa/IKmpy4ZV0p7CVypuPXV2grz1/tO6Cb7+GB562CxcOnII 6dAeGnRuZq/+W3Wn1F159fG1TaAfVWqCq8ePT5yYLMlbe9Yqr6qBAQe1RcJMOcjB PZBZDtdbNeupYlCLRQJZvNMnI//+T8oitJFliOhyBRrmzbuyxAsNPdRoMIQX51w8 eMMJoOD4qkrJnubWVjEF2RxH/OyQmayVbU22X8DYJEhuEvN7HngFqz+m5QSqsqbT SCP8lyCsPjXYkp+PU7mnqZcCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 433002922231535760750103741141626255339969 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 12:30:09 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-01 12:30:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'frascold.it' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 651552843338138862640603330275190118695221162120833183803339107143922695688644646308793847384876408271594256591417254984329995759537166253543244233062764166756695026938013912528539904145001859370091574589767957296064905532991087725243156165682626944435140223710897630136768209132577432967074358073766401887084067209590808851894758078842851769494664333862085979179658148496947167862301733462813743870318127682244320876922216965658754421410472213074436993102476781701921943690246069488388675827219451169885352329960817223253650126529070789894598687422807798767860945306720631096373704963402157122416082795676543375894066438812766512490736195002034041961799262692375126775358707182196119931405100234959293921613337623322495028000504438369176088635975682572715832449940634398345252589013283026894006304166709903235739223192341436181532610985541496837758531086305906700715266671352088203568103590055078132576612428027935203662827359561864761865643584829111553844297917200997916099502548910829920144634527518337124746760839079908825710770244907800270855279310848339852397190490503158956484776847235077812800043285791241648279807640467977226829423837977053931659460412380676512073616822730650103862657209820307635026883854510574493126601111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0720d05a467dffb012d5cc3280f5e0fc6b11a4fb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frascold.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frascoldindia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frascold.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frascold.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frascoldindia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000187e1ce5a7400000403004630440220283bdbe990979f45e8ae518decd6612d75a0f6a552b01c557d9b9c81c3ab0ba70220429f640d67fbbb1a45fc21a457e9770ea920e32a794229a824258b557433ad6c0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000187e1ce5a7d000004030047304502201436915824b2c18cca81e60fee32fa8d952bfa425c798e3833cb1b6d5a7da6aa022100986996caf60504599d8ff2e150282874ccfad9ccaaad08b3db2d911f0c4959d7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0015a43fcc4b5d5e93891b2f7294ddb4439e282f50ddd2d6968a233b965184cf16ece57f68fe2ca647bbce5e907a67de0543370ae29ba9dbfb0a0a9fed7518242cdd1b8f21f0416617cd7d6d0e85a88219f55feca195369e69cb7fe21f0549506ca4f149b4b8da551ecea1df03add62c71d0475bce1196e92e683284941e7bc28d8aa26b332a92c4016cf2c26ba2588874f2d8df40bb32186898b5ea36ad51f0170a281db138529c277fb34bf527bb73c2de3884dd65c01dbc03918801c040f8f22da264068c67ae2243930552c33542d5ed6cd4744c91d98655715b65a3d2c11a914ada7956bcf8cad90aa104facb95609094a45c830ea020e15bd05bb0ae597f