www.airsurvey.it

Issued by R3

About this certificate

This digital certificate with serial number 03:1c:3d:9b:c0:75:98:a5:d0:d2:9d:ba:b7:f5:03:39:e0:24 was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.airsurvey.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:3d:9b:c0:75:98:a5:d0:d2:9d:ba:b7:f5:03:39:e0:24
Serial Number (int): 270946655686362550779055882025110290948132
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d1:db:a0:d5:92:6e:be:93:de:93:58:bf:f2:d7:e0:f4:f8:f3:78:c8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ae:7d:43:48:09:b8:81:e0:95:12:01:f8:58:55:0e:fa:31:06:e4:a9
Fingerprint (sha256): 1b:0e:fe:41:be:b9:e6:08:39:68:9b:2a:4e:cd:42:ac:4c:85:0e:86:47:a5:8c:3e:24:17:d8:b9:fa:4a:ac:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.airsurvey.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.airsurvey.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

airsurvey.it
www.airsurvey.it

Other certificates including the domain name airsurvey.it

(limited to 100 certificates)
peak.app
api.getspam.app
www.airsurvey.it
iscz.admin.convercus.io
s.vision-glamping.com
www.lagoon.chat
dineshbalaji.com
kushiro.cranedesign.dev
allyable.tech
www.airsurvey.it
fathom.exomnia.io
pages.app-staging.c-rayon.com
fitmas.mx
palomind.com
landing.cometelapp.com
autoimpute.upm.edu.my
www.atacadaodastintasgyn.com.br
fathom.exomnia.io
www.nexttier.io
www.lookatyou.com
promo.lapsnap.app
www.saicharang08.com
www.teznearpay.com
app.airsurvey.it
docente.link
uepym.com
lunch.busilogic.com
immanuelodisho.com
iscz.admin.convercus.io
venturaiot.com

Certificate

The complete raw certificate details for www.airsurvey.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270946655686362550779055882025110290948132
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 01:03:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 01:03:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.airsurvey.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 744927149472034602513951069588963264836128403337230771297572456143858527214929389646239054344146928728022758426610719162851936430621069345816099178730905009000714750780387030412706488995872801719277181215485222504249474925885318387384467261406773201995634935164577674801824890469789522968545803475815996096445013951408655082122711492443295243567831142479446866141801232182304105802829741385822579526635940391040572466649900755677490862792733268652636709767181334874121304787249864840598012808387148851906707371649023349824192941275136373089692197162045760938680049310923460472975643627296021118530632136791239466235799711764877739467199753778627771333707892471700926337841142144731675565221818566343888240750331547408780247592090541723279674014368921225720666818273011204609083077576023736050702315578891336217927935987894720806690447364050126321475740360859561521024195086910047400247655452683595045035185641128922424536575084911494136753957470318206599625610122953972259869370300971859912413536822115860421025127752600166945963037516379293679982229534717960625797611215432862344094077482044906785097004388449473657710815211618603444878106573549150610726906641783419107396587674192488650696014380460740063401004696235392092107863197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d1dba0d5926ebe93de9358bff2d7e0f4f8f378c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airsurvey.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airsurvey.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d1528eaa70000040300473045022100cfca54436f6b8483abd9e1cbeaa647da059c1486715afdee586b2af1d76069e3022067778abffa030d0592dbeaeb734f44347d8e20f6ab8856fe9652fc763d7bbd7f00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d1528ecae0000040300463044021f4cd7998f0d1f61290e73c92fbb4bf306dcb0c9ff41f17164e51205db172be70221008f30e54896f1517b1b0789e58e49aa3e390d933860734747d837ac01b61d8e5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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