acqualagna.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:48:5a:76:54:ad:91:87:c6:dd:e0:5a:8b:62:65:36:86:f4 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acqualagna.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:48:5a:76:54:ad:91:87:c6:dd:e0:5a:8b:62:65:36:86:f4
Serial Number (int): 285957433141712177139695428937379950790388
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:7a:a9:b1:0d:bb:df:6e:3f:58:20:1a:67:29:80:75:3d:85:8c:ea
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:a2:ad:f2:78:63:8a:5a:61:47:b5:3a:3a:9b:92:ae:2d:b6:62:07
Fingerprint (sha256): 14:87:da:06:26:34:44:2e:52:7d:3f:ca:09:d4:82:52:21:06:5b:53:3b:3f:b6:76:48:c0:ca:cf:13:1b:da:31

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acqualagna.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acqualagna.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acqualagna.org

Other certificates including the domain name acqualagna.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for acqualagna.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285957433141712177139695428937379950790388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 16:01:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-06 16:01:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acqualagna.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 664513235523948384879691453865315290425444525664710984515568921906065177869155351174337269182690858430763644108253488082277022747163156432288199324357297102071805547880349998081930577922511307213604880655545791503663638704073781607705229178229097134798691165355816513129830266911819726035094212294314014708471581074157288186910815577519504827506548278833104735253029903541598963772131525463962056184320869256757927557276938603129483883822476619967310917559140174775156738360305788442558715420718343660968910330615636212233530790138204688521624660812965848590847080462714760369672679822290359956542539545770355109302320581140863954430069178439273783545601945227594218445534834301646330450003307313697493283141126918094448845521483939511514802926106867234296997307193422842360628392267314398009783440587901644247635037832821888398353202296666932896745522530249944100993188769196611938297856625903885928270544477675773234696518499625894203497286226146388374504394372250853294737957663224297625273710330190822741967317819499349641104966515118208608589065300858086251521122677363631408073982913650621880948125664802086072897058872094930028173945880485392972258389275874008251687040567170370707004771900183520501011997420963621037850344003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							627aa9b10dbbdf6e3f58201a672980753d858cea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acqualagna.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001701b73675700000403004730450220315fcac76f4998ee2a06284dc58edf43c6f8704bce71b248dfb5e55361c23ae30221009d9fce9991335551003d350804f97a84c9392389cd7e315cefd2f119c1170d4d00750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001701b73675500000403004630440220026a2027f97b6da4286bdaeff66e83556adf3e81e6bf23530528197e6a77ca7c022034aba92787fa34ea5e58e5be2ff3f672e14b6481d466827dbc77974826f33eb3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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