amatore.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:71:9f:70:25:1d:b5:2a:a0:40:f2:e7:96:f5:72:05:11:07 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=amatore.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:71:9f:70:25:1d:b5:2a:a0:40:f2:e7:96:f5:72:05:11:07
Serial Number (int): 300000694798727584202183420638005205209351
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 17:08:b7:24:fe:db:8e:b8:31:79:fe:ae:97:3e:e7:99:de:8c:99:70
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:6c:72:50:4e:34:7d:2d:9d:29:cc:15:a9:22:87:ed:37:d2:a7:91
Fingerprint (sha256): 18:e1:bf:6a:10:b3:45:ff:50:e7:7b:13:f5:15:67:4b:19:18:78:fe:fe:a2:67:b4:df:e9:71:10:3c:51:ee:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate amatore.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amatore.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amatore.org

Other certificates including the domain name amatore.org

(limited to 100 certificates)
amatore.org
www.amatore.org
amatore.org
castelnuovorangone.org
amatore.org
amatore.org
amatore.org
www.amatore.org
amatore.org
amatore.org
www.amatore.org
www.amatore.org
www.amatore.org
www.amatore.org

Certificate

The complete raw certificate details for amatore.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgISA3GfcCUdtSqgQPLnlvVyBREHMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTExMDgyMTE5NDJaFw0y
MDAyMDYyMTE5NDJaMBYxFDASBgNVBAMTC2FtYXRvcmUub3JnMIICIjANBgkqhkiG
9w0BAQEFAAOCAg8AMIICCgKCAgEA4ijX4OKbcqltxqzhs89Ibnp1vWh1im9b1d5r
KUdsngHMnu7Ei7QFj0Q9KGBEXPXGHGdLkZDUukAQXbaVfrmcik0ZxGeVlL0c4K2n
VD2marP2/I7kapJmXxcwMXwChT9F07IYkSvywdmDhz1ACu3unrm7HDrJOzcQoXpy
/eVJ10EWbD93cZGC3xmG6XKqrSSa8kGt3W2MhvSEjcTvyn2dqW9wKqMU+w82yBJi
O4dtZTqTVT9sSD00vlI4iOmWn3QlJqANsoCGMNGg8A/2PqX91LH/0zH18JvNYSvx
JBrAoUKI+5hLOyRT+w+aUc2FsxoJRnr8VHVTm24wpoSrVgQMBVnl/Yh+HsVdBW6C
843MKQzNgqAmmLOTYtIRLtVpLubndTSnzB1hBBeFZoNFeL43KSPm1KT0XsFcSrjr
RC6fZKNcA9KHauMOWo1xhrh3doC7vDY1nxuMIELcfHID/f3q3IPZNZGvSLS6iUtA
6RYWuIvsoobyIu0wqNcgNv+JqrX/l9cY35C/lwfwQFbU287Sc89ZhFTHT/lozNkA
Hba1KAfQFhLqrmuIOpNPfadcN1I37ALh7jbLqqLvljPq7Gigdpcl7lRh9/Ma1cUU
p5Jh9N7x4V9Rka5+Wvv5+4w5X9RoRmyxCR+i1/Pfjt0R2z3RL4BtOia4P8cX4wEp
uspRXAECAwEAAaOCAmIwggJeMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUFwi3JP7b
jrgxef6ulz7nmd6MmXAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzAWBgNVHREEDzANggthbWF0b3JlLm9yZzBMBgNVHSAE
RTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRw
Oi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3
APCVpFnyANGCQBAtL5OIjq1L/h1H45nh0DSmsKiqjrJzAAABbk0aCM0AAAQDAEgw
RgIhAK2U/HF18k9c/7FYBHg87F52W6iMIhyvbRs+Bm5pqUTaAiEA6CjAwnUMdcwM
BWz/PziSJzpS68DN693MTbb8uQ7DekcAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6
cOeySVMt74uQXgAAAW5NGgjkAAAEAwBIMEYCIQD0/54/MnbX3x67cErUrlVIQPhu
b+IOi3LFn4cU1PmHnwIhANPyTPLf+qCGWsBmYJ9mhtydMAM23uXN+xuiI6xBaLqK
MA0GCSqGSIb3DQEBCwUAA4IBAQAOoYO1IDuZ0G72pY9JdpGWGIMra9T/xzIsNNkb
u/HZjnvYS6yrsZv6WqSwjEZ9d4Q/rTG1A372JAhomJvQrgS9v113wFfH3om5TRzs
nmLjlPYLt3Zaf04otIFe+psFa173wK0oHF5HCYJhntNtZnRb0NDeXbCqqj/GV/Ql
QwwFazA1xnUtIUxXGRagvYFyvfRqOWoN/UDu6UPGN0uUY2/qeJtfyy+mqzFMS2lk
XxbOOVQ/qjrg22gP0xzF33OCmzIYjTPKZqEy5QcYuVhxk6wGXvOTQTNGusUW/Fu+
7uWB1QFmmRbP3VVpTz3MY7OpqxRnSbLDGQkb5VMb6VUcxik6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300000694798727584202183420638005205209351
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 21:19:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-06 21:19:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amatore.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 922650442284629177351590589898590551131342481863523701077650752091305192313187085583842704604200527089927171416624695990821275292317892166709285583132770725513664277252560039050572994307957340425055619213536323639275331035477298224379270600384653344339282068864437742963951961555615111788643012504146294549373768890681451865990712216721059627796012859923962983638923988612013183466595776309889527444115427313112411503786531136972645087788981625481327653201753263804126507728195033351199494623617345700908735412465824798771695062149784134705013492318800996278999843573242970700421373048443547262305101051332405169218865694438704488559886464032838809133121079947239270533689505933984113150351599399757807631234618863613794298421094629660233410443801515984996456173094308826772550920934871152456506802089561814358371075922106074031708862623976433394692871672931536098987271342329793599548812297106050664684455373326099620896101207344474921854121679028446434535221154531473396877585548023480854954437037042763705462998717548886273178651855566124721197757775505311919135341973965907314926854023835748277227186822353650628833853747533185675236399873995970432387520078105720973973241317904324501896631090755700010539968327311574340012694529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1708b724fedb8eb83179feae973ee799de8c9970
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amatore.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e4d1a08cd0000040300483046022100ad94fc7175f24f5cffb15804783cec5e765ba88c221caf6d1b3e066e69a944da022100e828c0c2750c75cc0c056cff3f3892273a52ebc0cdebddcc4db6fcb90ec37a47007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e4d1a08e40000040300483046022100f4ff9e3f3276d7df1ebb704ad4ae554840f86e6fe20e8b72c59f8714d4f9879f022100d3f24cf2dffaa0865ac066609f6686dc9d300336dee5cdfb1ba223ac4168ba8a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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