bancoprestiti.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:50:3f:06:9f:66:11:34:d6:b0:ab:ea:f5:79:a3:eb:86:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bancoprestiti.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:3f:06:9f:66:11:34:d6:b0:ab:ea:f5:79:a3:eb:86:b9
Serial Number (int): 288643222899461142606125963073659706508985
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 43:5e:65:62:f0:90:2b:b9:34:12:e3:ea:0b:80:88:d7:a8:85:5a:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:8f:24:19:ce:a9:fe:af:b9:23:d3:19:78:5f:71:ef:bb:24:5d:c0
Fingerprint (sha256): 13:dc:59:82:71:ba:40:6f:9b:fc:2e:51:af:b6:c0:6f:f7:ad:e9:40:c3:18:37:1b:f9:58:a2:46:5e:ea:a6:74

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate bancoprestiti.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bancoprestiti.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bancoprestiti.com

Other certificates including the domain name bancoprestiti.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for bancoprestiti.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 288643222899461142606125963073659706508985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 21:36:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-22 21:36:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bancoprestiti.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 788384549645930216011080177514345349878916404230784001732454665728731698136099304052175552346248706543224778169025184464009547598026619073789343387152102171681580046153230547768294354121334490857522585360000822765502891283916639349471695990389281711676981973871303082615965835027845924350810770394392252124738542903426031759193829915703738679929277743512540666731831655207564678820513521160204159083776137618206915239165496651597161289568453219392449713805888769862863338553575122690174500486467522688064137764300277493986553799866217678762254615022653147054057683551653539209720313135596856563273308031423102840359466323694284274927405398193787258701828373785668332749415701122385122460396262726301658577395875320972536264305779339935198851384413961369898187558919998202578990375233932744399413450221243268500938194104499683821840731201600456789994162513970586834222366126385152733252768513320331604856300362223036460646997863624702225695754704394629596606013372583189082913428091338210157164750248530108153583234201201069702478329539322212558530638802528537788465378965100865737983908842800345823432695719685229988746899408840710525770588922981878663632894344458705160663041838628762803378279971489525348251826138241246624375223303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							435e6562f0902bb93412e3ea0b8088d7a8855a11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bancoprestiti.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b8ba24b6d0000040300473045022100826ba84cced7596fc39edc7b6fc314ffca7306f66b62dcebe4108f5147f77bd80220643e4fb12217101391ae7c5b2d7adfe36a064469bb946843b856e52894d4350900770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b8ba24b8a0000040300483046022100882758784af926d7df205da426622b756b7e4c26cf41d4c170f13e57271250ef02210095bf2cb5a9d01fb56b81d8ccf97d61e79d6361674be00bf9e8a860e652edb1c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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