ordinedivendita.com

Issued by R3

About this certificate

This digital certificate with serial number 03:5e:0e:de:5c:1b:47:60:ef:ed:33:92:d7:40:9d:9f:e1:8e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ordinedivendita.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5e:0e:de:5c:1b:47:60:ef:ed:33:92:d7:40:9d:9f:e1:8e
Serial Number (int): 293343164035835473608819097318295672447374
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:b1:f0:35:4a:95:82:f3:96:e1:1f:f1:84:d0:89:b8:f3:1f:53:55
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 44:00:d5:ce:4e:ec:6e:c9:09:5f:e6:ef:9e:28:01:13:61:14:c9:f4
Fingerprint (sha256): 19:dd:32:64:d8:99:83:76:35:2e:f7:8a:a5:76:e3:5e:72:70:35:d7:e4:3c:2a:2c:75:56:2f:fc:37:19:89:03

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ordinedivendita.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ordinedivendita.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ordinedivendita.com

Other certificates including the domain name ordinedivendita.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for ordinedivendita.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293343164035835473608819097318295672447374
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 02:45:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-04 02:45:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ordinedivendita.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848796580700077040663457523625121037669110854989848956668970980965001705401210806161642188836234507968459663233284305571359903998172675017195122219796502977591012065791189262670465011959379958661639029311958284109646513566031595169308715635186999797247671401797648395218578615057781391497759120126942325536433883935961493244532823549106766582183043300687324591295823929700103472436050290721765461501782522225709117461788013346551261826037944534219957149811983129895357424492724216474841669158679639029368371883236107181851393106963129513997372818748910979493088266409493401281554432404543952597866964415289283982843358055939747109125101327544830022944036006923978880242318793102528472356496270797453041094314881908801928937449985601199104441356713678196655095713138573354766201200410594210297665641927233155849876209111706091158130544538639280152206968977931504365926484334585408302178422947947996709884792517408843670842923786549269600564832276603484483299021374057293126671311365591259408006965311559318614692660180137911869441061809023711885745092080934167260223158696984727138181501498546010767171106418851389441074446204337703482886922090188710538929813572115715225905086370802783646361093486808437082474301976579211211666105483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4db1f0354a9582f396e11ff184d089b8f31f5355
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ordinedivendita.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c38146210000004030047304502204cd9a2292c41384fa9faa0133ae880d4ad83a462eb140a2e6393b3abfaeca89b022100af35a007b3ae1e9c75745e7234ebd94dc3f9b32fb545715664fb5e1ac517495d007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c381462320000040300483046022100b7cee1a193c42edd8fdaad61f0aad4d16457e3609b9c64b08d244023afa77e9f02210092fec8e616d11d49e6c17ee93c9e59ff2885d57f6eb364adc250bf6abddb1766
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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