www.boscaglia.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ab:e8:0d:9b:aa:0c:85:d7:cf:fd:f2:b1:8c:d4:66:3f:67 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.boscaglia.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ab:e8:0d:9b:aa:0c:85:d7:cf:fd:f2:b1:8c:d4:66:3f:67
Serial Number (int): 319833594090888630447212897225784999427943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 60:22:ce:45:26:4d:59:90:3f:d1:8f:47:c0:b8:b3:ef:38:dd:66:2c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e5:ee:1c:ee:55:14:6a:e5:c3:14:ee:6c:f2:6d:b7:a1:29:56:be:e2
Fingerprint (sha256): 12:c6:17:10:42:84:30:ea:85:78:a5:b8:b0:84:31:b2:70:a4:e1:0d:80:fb:c2:d7:3f:c0:bc:93:48:f6:15:1a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.boscaglia.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.boscaglia.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.boscaglia.com

Other certificates including the domain name boscaglia.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.boscaglia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2WQYd9ICIONYJGTNvUIz
C1AcsuSrdFZNKhRx32efwOL8dLj3R10QI0DdqNYQbq2m6srFTJKrFzMSr15ijBM2
yqck6UWcXugIIuKTATZ/r+UILQEOC/v+9uTH+NjPRMX9x1EJfIpeL4ZNmZr96zCj
9ScR5aRZu0NiN9lNRfMZ4yea0x9HrxobdNfFiFHl3dtOkU739J4b8eeqF/awopcd
m0oIi38ZMWKqSfPDJ5apvazUbcYGiA9bkrD18OU9kDmCU36oU7hUAEHybqRKCLt2
50EFEXVwCAdDV4oPXb+gx46oFjsqGwPtftR9eIKL/twIofGvU7/lG6Ieu64a89FP
wsXP8OKWaUuWWxmNaQngQB09tiKzaVOw610OAVCk5Fs+WdopAcT1YSAQgE25PoDu
ERxqby9gA9aiQfYlc64+bo/rIbpXy7zImrCL0hO5o2aykOYQvi/Z921FW7QrKgYB
VGtLO2YlMac1p85qorT3xDS+/b3B0JNldyOjX1lAlmhhE5caSM7h0UyO27uqyIFD
s80d6EbqMSIe2y8hCtvUscBKg52xpuepoyxL2aykrZD1kb5QAuvMAbRC1vei5EJa
GqJLZKC44ucaPK5CvgT8b2llUIgXwMK54rHPXbnL+pa9r++SENDrV5sqf/U6Idso
ybeo2NZNZDIgo2Oam4x8n4sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 319833594090888630447212897225784999427943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 08:05:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 08:05:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.boscaglia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886877896870919045098221780400784534844245722541262832756493146252912261696634709399913466640212165896616309018586325219573796631002677345765904832386217410266900699333660645680142427909003797071340867282429344895334925933953891179652816456301746083842643892657954092085412964247584052340473800949237020579616472335593405346192174015602891174475180486663681221641067238558661922335497560538692243897136144562554038667467021121103971213783313206136245995040361779497873607783972209998624790549403920215083008021642909256556406620783102733153918672031194407623378872176767094372265227168460402774768863191730027561012695729954849929569178893198155478233997570420477100651085571791424229477594622894851386643774417758737333134858108047639892155580701821330796236493164492865609959539542652889966658615589549095240973794204161312629626246782208160151745139476207473606850149684051159360549661822181206295907676069067607427936580321163050500998524950864783408569198566422090441531909446430777322798548431144885588280468949955216426167631433974909902957105749850615730489259966977285209405516698331478702000377054190113988327416041491492602941534214795064711612116780040680369916976380949751730698394724280999111525470307430577375866036107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6022ce45264d59903fd18f47c0b8b3ef38dd662c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boscaglia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7c44af020000040300463044022011c213012fd4f33b22b3dd9d948191f0d23f523c1a15ad71c36e8e1ed7df8d7b02206ca4afea777a0f0f85185f6ba9876b30d7500ffa8d9ec6e822e486c99e31910500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d7c44af04000004030047304502205e0f1cc161ad8838a30b7d84f26e75df76e857d9b80d963511e76c16fc5ce8e8022100c79e928715069af1816369cebe6d6ca51be7501744d1f8bff3891226fff867a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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