sanpietroinlama.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:70:19:d1:78:cf:3d:10:97:87:0a:a9:ed:da:b8:78:cd:89 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sanpietroinlama.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:70:19:d1:78:cf:3d:10:97:87:0a:a9:ed:da:b8:78:cd:89
Serial Number (int): 299482801230672185246200414998990914375049
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:88:cd:48:99:22:20:35:ce:6e:82:38:5b:c0:f3:bc:82:84:6c:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:fe:c9:ed:db:16:05:51:65:a2:cb:57:b8:3c:12:67:2f:a4:a9:d9
Fingerprint (sha256): 19:0b:8a:86:e3:dd:d3:75:1d:03:ab:85:e9:57:97:d3:1d:75:ec:55:57:58:ee:46:da:d7:6f:89:a7:aa:74:51

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sanpietroinlama.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanpietroinlama.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanpietroinlama.org

Other certificates including the domain name sanpietroinlama.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sanpietroinlama.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299482801230672185246200414998990914375049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 23:14:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 23:14:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanpietroinlama.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 747896707645590435179877187795913515408489626367783750387407710149308165205930376616313122965812031725824246257302091647680277024718124936965562507924712753823375427795605376232940912021434926290340493732432020552390375776191015624922619131977970594211526693614721243626555755136255383646788829087084310614429739933102156544115328852523100295373291076548333092453243213074980285455132100413437418336684538051540875568363410494010228011832708466234458334944620220630967051515314086623734148309311517565302835525021728318242207696883537566446960105311932860273571389480598808060161073473414067250514091447358092066920089923918978271836664010171093193477275285755200826590980318949353916153567061310615068218625169053078266056461987214616550273607582848213248470296775259212260918329127946917254384651556132087869550584929201756277890591842137779812973771919964163362106126124591134316332877402728570982358637563291532519279471008594813385662308683602457095114512398827696651974499184702188426980701050293451712581964988374281364225803496043746390964823096885781135130556099295580237365091857787926631497881917305825012670253808520124461615915518818649393611322011445874672385569257279149381775825525866724305399810345617287063647704459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a888cd4899222035ce6e82385bc0f3bc82846cdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanpietroinlama.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d7f84973000000403004830460221009e6ae1f99c814015fe93fc980957a734fbb7f40e92c4b3ccdfa59c0df3f31f600221009c61ed001b3072d1949d192992c5617f5fc22a8fc7493c4e808b29ae4e325b5a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7f84973f000004030047304502205a600172783c60bf5c53756163c572cc88c297e65f90772d475e1435bba8efb20221008c16e50641f6a20f16eb7e20c9a32c2814aa3aeb226d6b3a714574a8583fa36b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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