twai.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d4:ca:e2:c1:75:93:a4:8c:ee:cc:22:85:62:03:4e:1e:e6 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=twai.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d4:ca:e2:c1:75:93:a4:8c:ee:cc:22:85:62:03:4e:1e:e6
Serial Number (int): 333746401020578717816233548203313372995302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c5:98:19:2a:25:5c:89:e1:db:0c:64:ca:57:3e:ed:dd:3b:fe:17:96
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f3:21:3e:e6:bb:2c:82:cc:f6:4c:91:26:d3:93:82:c8:5a:0f:2d:fa
Fingerprint (sha256): 14:f5:8c:42:52:6f:ea:36:54:d2:6f:99:f3:6d:3e:25:59:4b:7c:d9:3c:73:ec:de:e2:74:01:96:a0:bd:bd:cd

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate twai.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twai.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twai.it
www.twai.it

Other certificates including the domain name twai.it

(limited to 100 certificates)
gev.twai.it
gev.twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
twai.it
tcc.twai.it
twai.it
gev.twai.it
webmail.twai.it
tcc.twai.it
twai.it
gev.twai.it
webmail.twai.it
tcc.twai.it
tcc.twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
old.twai.it
tcc.twai.it
gev.twai.it
tcc.twai.it
gev.twai.it
old.twai.it
gev.twai.it
old.twai.it
twai.it
tcc.twai.it
tcc.twai.it
tcc.twai.it
webmail.twai.it
old.twai.it
webmail.twai.it
gev.twai.it
twai.it
gev.twai.it
twai.it
old.twai.it
webmail.twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
twai.it
webmail.twai.it
twai.it
gev.twai.it
tcc.twai.it
twai.it
twai.it
webmail.twai.it
webmail.twai.it
webmail.twai.it
twai.it
webmail.twai.it
twai.it
tcc.twai.it
twai.it
gev.twai.it
twai.it
tcc.twai.it
gev.twai.it
old.twai.it
webmail.twai.it
gev.twai.it
gev.twai.it
webmail.twai.it
twai.it
twai.it
tcc.twai.it
thechinacompanion.eu
tcc.twai.it
tcc.twai.it
old.twai.it
twai.it
tcc.twai.it
twai.it
twai.it
webmail.twai.it
twai.it
old.twai.it
old.twai.it
old.twai.it
zend.twai.it
gev.twai.it
twai.it
twai.it
old.twai.it
old.twai.it
tcc.twai.it
tcc.twai.it
tcc.twai.it
twai.it
twai.it
gev.twai.it
tcc.twai.it
tcc.twai.it
old.twai.it
gev.twai.it

Certificate

The complete raw certificate details for twai.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISA9TK4sF1k6SM7swihWIDTh7mMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMTAwNzIwNTJaFw0x
OTAzMTAwNzIwNTJaMBIxEDAOBgNVBAMTB3R3YWkuaXQwggIiMA0GCSqGSIb3DQEB
AQUAA4ICDwAwggIKAoICAQDZWXMGCpssCV7NIqzfbRRaz3xR0iUYHY2lizWuBQk/
1Uj8kXEbMxnBKN1xzOyUhxrNWLK51XUEBNEB6RwdLINnn+NQ+3r3kwAJNemRkdBA
MFKZ5q2HfqSbLZXdxxAt3kxJ3Nz7ahrLSM1fx3ubslhk1zh8CTlqhwgNduUzysma
DmnezxjQy9zS+Ce2xH2xh1r4T6J0gLb7/keJ0UgAlEeREr+l8JVZvzs2J3CXVuiX
Sn36N2ZLPgXL+XOExAgeY/8W1geOvGR2PR+JLVq0sBisobkCqwhH2pXV22Q+mrUx
LH4u94zVE2bhlNIjGz0LBUJ4WmWOD3UzbGG4NBwA+rldR1d4Edm0ZIbEcQjbPI2C
Zozer8/fS77Hj4U99RKdmOGBDK4oeyVBVfKwO3S7xC+6JMM1e3/zh9zEydnUeIdy
kCc/bxECDJwUT8Ja7zEXPrN6cJkYmcE+zsjDUGa3gkp9S7zz6qPDZAm4Vkd/bFIR
1qdnj8aZ0VZnLjAbXsMEXuRB904XXLsHwD4qxMjffmsWSxqQx9RhvIg+gCW8vcFT
GBbYKRKB0nPWxyGWRkxpO53ILE+0NedXYVShR5IVeqC2McdS3D7LEeApm+ycg6du
SjddcosyAZW8TnE91vKygii987LAtHWlmV/W47bx14qWx22j963ilJKP/bbv5H7G
lwIDAQABo4ICaDCCAmQwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTFmBkqJVyJ4dsM
ZMpXPu3dO/4XljAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggr
BgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRz
ZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRz
ZW5jcnlwdC5vcmcvMB8GA1UdEQQYMBaCB3R3YWkuaXSCC3d3dy50d2FpLml0MEwG
A1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEW
Gmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB
8QDvAHUAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFnlzRmKgAA
BAMARjBEAiAlk2udmpoZTb2Rz7weefrsLG62CZH6i26PxDfrbPia3wIgX2QL/SOh
PJnQQoJ4GUNSjyxRSCKboydG9LpWECYB41kAdgApPFGWVMg5ZbqqUPxYB9S3b79Y
eily3KTDDPTlRUf0eAAAAWeXNGY1AAAEAwBHMEUCIQDWbsGMT7yXkOrdNioQLzjB
Wixyb4BMR2OO5nIGHcEJjwIgLVLhcQifmye8wcGshrNrI0kPAix1wIAt1yB+goES
xc8wDQYJKoZIhvcNAQELBQADggEBAGydrHTJ5cLOok5kWJfbaf2cwp9kKM3VdIFW
jxoi/hK0CtZmgdqklF9olbkX8JF7s+FOvdYt2dOrRuAoY7t8hm8ysMyPGS/3vYCJ
U6/3h0JXGegs/To8PDDqfDbKbluwHD8fB3rPMRjEOfhCy8fM9WWUMiryCOyEm557
ZOc8LeiYlZEn1R2rnZ32OFcYhFI74f3mNQMzbjeeFJ2mrNtFe73dAcJxirfHMfVy
KTHHnYaMhscVRnchiGvFWZ31gtqKKLiaMyF7/p0FVUlrBqnmJecZcN5aJZ9eCoDF
DWc/2e+Evra0/lB1KxOTyMGir27Hvbt7ziOk1+l7J14vtgsKWlA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333746401020578717816233548203313372995302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 07:20:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-10 07:20:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twai.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886708236786711663579998272662215516323057497376123130973946787870607574545647100093336029227141995036471713894224314653414333870203663460816311087668479243488430760580987606647511096697052790996460401544356672911918588416445280198172817009672803001707163373670062804603969023420720241317490594685592048221013925549594293069049209514430400697994911826294117391056899649711213815199964105437492058795763232137960216927391980512641183542977323551588551822397509092414665933352417766742152387591245409212816500256707409032151006061484017273375788018863228224119973730892244162395688792008537451984094565869122719320527604084556241204945098376237446724068125614763625256271196310946219618405615983283271725433270108815064069949104226114088408543390498610010075789363382934004874648376798968052678732858602163542996362414651256082269105388440019101389889903093200976142168574535036353054867141987997324571924601156567132018540680928998947811032577664885924575993705511297411418185747107135243979090853317854152143343654939412921828679720789716479166115433758061362656707079566380288865307297824205529296476760323256128721669887017015436819491375584773508533395055519541422119008573932417724304135516922750720591427478130311394372031006359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c598192a255c89e1db0c64ca573eeddd3bfe1796
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twai.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twai.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001679734662a0000040300463044022025936b9d9a9a194dbd91cfbc1e79faec2c6eb60991fa8b6e8fc437eb6cf89adf02205f640bfd23a13c99d04282781943528f2c5148229ba32746f4ba56102601e359007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000167973466350000040300473045022100d66ec18c4fbc9790eadd362a102f38c15a2c726f804c47638ee672061dc1098f02202d52e171089f9b27bcc1c1ac86b36b23490f022c75c0802dd7207e828112c5cf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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