calalzodicadore.com
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 04:56:a8:a0:d2:c0:59:9f:ff:5e:a6:f9:b6:e2:c1:4b:29:0a was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=calalzodicadore.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:56:a8:a0:d2:c0:59:9f:ff:5e:a6:f9:b6:e2:c1:4b:29:0aSerial Number (int): 377937572627576487444032657922493726271754
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: ad:67:5a:f4:23:3a:3c:ad:eb:ff:9e:e3:63:ec:a7:91:75:ea:27:0a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): d6:39:76:03:94:e9:70:36:ca:0f:db:af:39:bf:13:fe:be:ee:7d:2d
Fingerprint (sha256): 14:9e:59:e5:18:27:d9:70:90:78:48:b1:70:97:25:45:7d:1a:70:36:77:a4:6e:cf:51:4f:20:ef:e8:a6:e7:94
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate calalzodicadore.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for calalzodicadore.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
calalzodicadore.com
Other certificates including the domain name calalzodicadore.com
(limited to 100 certificates)
www.canosadipuglia.com
calalzodicadore.com
calalzodicadore.com
calalzodicadore.com
calalzodicadore.com
spedizioneaerea.com
calalzodicadore.com
calalzodicadore.com
www.calalzodicadore.com
www.calalzodicadore.com
www.calalzodicadore.com
calalzodicadore.com
www.calalzodicadore.com
calalzodicadore.com
www.calalzodicadore.com
pigiami.com
calalzodicadore.com
calalzodicadore.com
womenwarriors.co.uk
calalzodicadore.com
calalzodicadore.com
calalzodicadore.com
calalzodicadore.com
spedizioneaerea.com
calalzodicadore.com
calalzodicadore.com
www.calalzodicadore.com
www.calalzodicadore.com
www.calalzodicadore.com
calalzodicadore.com
www.calalzodicadore.com
calalzodicadore.com
www.calalzodicadore.com
pigiami.com
calalzodicadore.com
calalzodicadore.com
womenwarriors.co.uk
Certificate
The complete raw certificate details for calalzodicadore.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgISBFaooNLAWZ//Xqb5tuLBSykKMA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MzAwOTIyMTlaFw0x OTEyMjkwOTIyMTlaMB4xHDAaBgNVBAMTE2NhbGFsem9kaWNhZG9yZS5jb20wggIi MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDgsCRHVfU7o3WZeKHXdVgaAREv oKDvOF3gKruk3JGj/dY9+0NQEjvycrUV+BUDs55nWCYthIQaRp3Y4Vtu5yZjQgor XIzwPmPN/rfwiP1WAbCFaoHkuWWEBvLxlXwgf18W9YYFQc3OgShrA1BGOEX5bV1v fVVskaWEEchRAZlgal/dfxX3bD3mYYu0Oeqs5zIiyfc8UebbLnY/W78widRhJmo6 9Uu+4a4jXzljPfqg4Ry55pTLvNk7LhtLQKAkIcT1oA+wEbu410VjtPhuzBw1YxZ5 bjc96PhBSJoAIDB8LLZEiPsKsk15YMAYaYZigqYc5wD3KwB/WWAwvUmD1Yvwil9n Tslem9duEjgrU1istiruLOnzZWUG9BnC/nHqdoyH2o3LuWfJoNyMCwLKJ62u3Aa3 l1oRLwq3jYFJDfkzFoJGPu6nqJ57hStgff8FKV7vvyZ6NYivuD2BPbiEplSnXwgh zaxUlkjOguzzi5VNnA2+0JW5IaTKae+nK7/FiWrrGh03qXTbzzfln45+7yq8L0/N 2slF+zO44kAeRSXYXJNoDIC4p8NJe80wRJED5qgUHJSib5GKFlTIRenU9iPjQpG7 qxA8ZgeNMd8thxM7h830JpCtcioLbU46pnc5WeWwrKwROyCQ9Pz4L8dRs8DErCEf +jI7rnRgO/agRuBRkQIDAQABo4ICajCCAmYwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQW BBStZ1r0Izo8rev/nuNj7KeRdeonCjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObem RWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3Nw LmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0 LmludC14My5sZXRzZW5jcnlwdC5vcmcvMB4GA1UdEQQXMBWCE2NhbGFsem9kaWNh ZG9yZS5jb20wTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEGBgorBgEE AdZ5AgQCBIH3BIH0APIAdwB0ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvM VgAAAW2BsT7AAAAEAwBIMEYCIQCDeGQtMkpC6dtbVMuZP4NjgzhRRuVxjs9JC3Tq lW6wsQIhAI64nHgSO2tRI80HlLDf8X8o+3uv2W4152g+CJTKZ5T6AHcAKTxRllTI OWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFtgbFAtwAABAMASDBGAiEA6Rd+ FcJi85VuR2levCUABylQYHmzgPAB+ok5BaaULlwCIQC8FNEkZ3qrFQi8dWQmrbey kd5XlxlGVrtSw+ovELuSazANBgkqhkiG9w0BAQsFAAOCAQEAXb+71BAZxuS/233S +l8zXTUs//Uk5xH7WWOXOHZGxJ7VN1xt9wib1DQln/mkqRICP7rQ7mwIcstwRBSp rMakTH6HPTCk9GrSruXvQ+TajbOKGbKedepRmhPPDR4dzEa82E693W3l5zHrWCs1 dXcz9F6vBdd0UbI9Pe8QyfD85b76lcYF2O/8woTcg6PQwvUYra55p57FC399G2by SIbRyKwg47EzvR+oMxqCHd7d44zETdPYizDygwMnzlso6z2yXkX6QKrwpUGrW7/n 8uMlwnWeIVPX1Kh/bn9Y44T7OnMeatcykOFMJOSL+xR3+5ryoolANMLaXua0ndDU c1otIA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4LAkR1X1O6N1mXih13VY GgERL6Cg7zhd4Cq7pNyRo/3WPftDUBI78nK1FfgVA7OeZ1gmLYSEGkad2OFbbucm Y0IKK1yM8D5jzf638Ij9VgGwhWqB5LllhAby8ZV8IH9fFvWGBUHNzoEoawNQRjhF +W1db31VbJGlhBHIUQGZYGpf3X8V92w95mGLtDnqrOcyIsn3PFHm2y52P1u/MInU YSZqOvVLvuGuI185Yz36oOEcueaUy7zZOy4bS0CgJCHE9aAPsBG7uNdFY7T4bswc NWMWeW43Pej4QUiaACAwfCy2RIj7CrJNeWDAGGmGYoKmHOcA9ysAf1lgML1Jg9WL 8IpfZ07JXpvXbhI4K1NYrLYq7izp82VlBvQZwv5x6naMh9qNy7lnyaDcjAsCyiet rtwGt5daES8Kt42BSQ35MxaCRj7up6iee4UrYH3/BSle778mejWIr7g9gT24hKZU p18IIc2sVJZIzoLs84uVTZwNvtCVuSGkymnvpyu/xYlq6xodN6l028835Z+Ofu8q vC9PzdrJRfszuOJAHkUl2FyTaAyAuKfDSXvNMESRA+aoFByUom+RihZUyEXp1PYj 40KRu6sQPGYHjTHfLYcTO4fN9CaQrXIqC21OOqZ3OVnlsKysETsgkPT8+C/HUbPA xKwhH/oyO650YDv2oEbgUZECAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 377937572627576487444032657922493726271754 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-30 09:22:19 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-29 09:22:19 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calalzodicadore.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 916647284895106263082529613149270097018122089247782424637970967236744158743162120444131525126304125163599624857728095788330250228354378590982688418269432019977726046772047737210445029214197235607645129919885152327971292509324339635030264853428854079521169615716843323122195849599220367626041793208534325940413218590798021338663598208364086415762783226596724845193955298253723467736268334949278793857199845026319779311511502080145891605279800632448101636187017179390789322154757663657181556345431041230680900681140426030267574880027831705945653881016987733668444592953727894945373236732035678455631588470487268298722416052775173302862762376579299480327910920566089618724156376729643675513686497842611037303703281275830830250422396240150769760993378099578331408841629925150413759496658764238278445691561997405448877897100124510472753188237619288255761390197422281359056524127434653593869397017464847193406214165831213072438426831961878859372838131705330336024371091004029166180630216962909022837935124302535583391883118186365896743767595583591126462769711933594765665075244633868876223368975104537470505305326338181411752335339990708841294218437856537234332445150921552714709901663063869950761265237250674992132127998597940526949880209 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) ad675af4233a3cadebff9ee363eca79175ea270a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calalzodicadore.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d81b13ec000000403004830460221008378642d324a42e9db5b54cb993f836383385146e5718ecf490b74ea956eb0b10221008eb89c78123b6b5123cd0794b0dff17f28fb7bafd96e35e7683e0894ca6794fa007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d81b140b70000040300483046022100e9177e15c262f3956e47695ebc25000729506079b380f001fa893905a6942e5c022100bc14d124677aab1508bc756426adb7b291de5797194656bb52c3ea2f10bb926b . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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