sitoprincipale.com

Issued by R3

About this certificate

This digital certificate with serial number 04:ce:de:86:30:2d:44:ff:04:35:fa:dc:b5:d9:6c:29:93:13 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sitoprincipale.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ce:de:86:30:2d:44:ff:04:35:fa:dc:b5:d9:6c:29:93:13
Serial Number (int): 418843096672739886615696784021590599373587
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 9b:3b:50:6a:4a:ea:69:24:40:4c:0a:a9:3b:4e:83:48:2d:3b:a6:f0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 78:e0:e4:8d:9f:ef:5f:b1:8f:a7:bb:03:f8:15:6b:31:05:b2:89:0f
Fingerprint (sha256): 12:b1:64:67:27:7f:c6:6c:0c:30:54:fa:d4:c0:17:7f:31:7c:ae:71:4d:43:8a:5d:d8:04:cb:32:ee:55:aa:62

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sitoprincipale.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sitoprincipale.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sitoprincipale.com

Other certificates including the domain name sitoprincipale.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sitoprincipale.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArUbSJfBXxA1GJF3l6WUx
LDNWCGe4g/74GrH5VWxOCeKbzEMABlC1lPz1lSd3ThRT+ejoH1HXmzRNm00kiTOf
WeZQuNCzPEm9RCpsL3pqXMkGfM1JELCsbJrbgr329KThdHP7ldTZt1BK21WOgO7W
kHdUgyd3B5/scbUp0HpND7njcgIn3ENWnTNhtDJjBgFkaco3T2CkjCm++DdxM7Zc
wpycwNXH7u22MXagZh4QpyEiH7bWf9J3cmXAx4AhUfpm0R2Yhr8tg5JFWmYFlR1f
Tav0TxZgaBlSskNB/QjqYeyzMGjnSVClb4XnAUQKfDfpkLpcSJKMnKD92tf5w/MM
N+xRHhR8roU03w3uqID1A8jVRNh7LeKZ07KIczPikHhTgG9DDxjD/ANxPgC3RYAV
83QHUXmRinUT0Vt546v2iF81AqMZ+rom2jZqu/CCrMB0on6n7oZrln2lABZ9sHhz
7bcwvRRUbJKUjQI0Rv8q2BuxE0fC2cIxxmSZAKsUAafcXoMlHAKzwbsZy8Ha43Ez
2bsdifOI87yKThcs/08jiHhl36IR4zGlb+icsKSK8jE/GpFFWaB0xKS+CXmkwMTd
3A3yEy4RKjHmLqRUuyyUz77MbNsSyigN0Cz2Wj706fCBUC2GxFQ308x3XMdcnktZ
tohqaYBwEI+Up5ZAotVMjk0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 418843096672739886615696784021590599373587
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 18:15:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-05 18:15:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sitoprincipale.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 706907033257696598124655470984467566256845202604090452605500449898290564388490206784269378933741000005823551450587851432228813520114363087792051656324183119792672977186231124534517781863448765766101026945103078670295094848581022221181300153502793349746322056260816105838655205331830853239686005436628131591957720914346251181510732194121886566774153790520272801922297916005360518000060989638612554077684870278776791606229021490840274629044591189732843871294269045108075014254877360305766703048730511264676944095303158900817097500363582922862261319810150519680225388791500618092874296520286614308015804946869350836294452355011448819779319943622612222991644069070172165074290558436267739321247346642318592096473498685907376540559042523655833629250415303543281234053505238181612335501142918774478076444875162192212174699313663462651269995579773131906661180184616096989467754931970815247916441361621551320985079359852982154001479068739435544855967658758859388050730409339462208028368409505693655594187535378420531630519275889272644382767720624131538016948563235213591604711335937077236217650676746083577725264071953184484358909151520118700599078710572002634666520615514358464320844446088504998149144867166586276367936299959272363873046093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b3b506a4aea6924404c0aa93b4e83482d3ba6f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sitoprincipale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d7ab2b10b0000040300463044022009a0d602e1585bb800259d9d46e6e548c230f4c8ca1ef403e0fba0dcb942129402205d6626b9b3b7146c545a0b74cf23cfbf7ba7bbfd9f5d15875dbba24212bb4f59007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018d7ab2b12c0000040300483046022100dac9baca9e71cc7d129b0835e0ed78525f1aa62525aead9c49668ee37f4ae5a80221008b424e7627248f78d5df57d51570811a1852d3d904ecdb01c5bf49dd330b6db2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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