mantovane.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:12:38:d2:85:0a:93:ba:66:86:99:c2:9d:2d:f0:ac:cd:ef was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mantovane.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:12:38:d2:85:0a:93:ba:66:86:99:c2:9d:2d:f0:ac:cd:ef
Serial Number (int): 267537470248360358436522366397458361929199
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 58:fd:7c:8f:94:de:8c:a1:a2:31:8e:90:cc:6f:5c:0a:64:3e:86:5e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9f:54:3b:43:8c:2f:d1:5e:29:82:2c:91:28:d9:21:72:c0:f3:49:28
Fingerprint (sha256): 1b:d1:8d:2d:93:7d:c7:a5:aa:f3:ef:fa:c5:17:c6:8a:30:36:4a:29:82:25:27:cd:f3:34:72:67:f6:f7:01:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate mantovane.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mantovane.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mantovane.com

Other certificates including the domain name mantovane.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for mantovane.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgISAxI40oUKk7pmhpnCnS3wrM3vMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjMwMjMxMTVaFw0x
OTA2MjEwMjMxMTVaMBgxFjAUBgNVBAMTDW1hbnRvdmFuZS5jb20wggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQDIZtONBgRVBbCo8ypjBH58dZUlPo0Dhwpm
kqCgfmAQg7n5l08Do65f2YnRWyVBUcKB3wDywQTLIjX3TUWPIJr3GRNAh4i87QmF
Oh59z40hCyM66jsgd0JwA0iAAZh9oS+DlEbJbHSZ815iwcsQ7nmcMgF2r0BDlkqQ
hZdhNzGxjt7GzIqg1URwm4TB1iM6Dkye2GVNDeI87MfbywBjqyBGw9fii00tev3L
oVl5xKTqa3c1nczEY8bdmsKrv+QxXNcC06U04zbcAGFqeyezigJKC1eSByj7H8lr
O/OjFj7eSvJuNylCj/rsLHU74OIOpNIGy841FIOZddxblO3I11laBbCNt3+ecC7J
zplnDoTyIRFiGQ+IXFV850Bx7KbSJAIiXdJEB2AyPk8hg0Ia0cFEkBFWeYMdKNRH
H5ArlJfDefEB3P6Kj8FjA9AShY+BbFn8t4jGcoKhc6xtGISBkhejnKwMynM2yG1r
qGddGRkafo+J707YbjOZWtc/WV7PA++Reb35CssDWyjPpLUu83Y/rwRZvx8tLWBA
MzTsnN4uQkr/ek+ogBPPWAbiDp/BP+k8BRZJJdY6StCZ9mT0Atll+Ce8Ou2uB6+m
OwLHNL0sj9O+AByw0Qgv62ceUGGcw8K0OAp/jLEz2W14lO2I+fxAPQ/egOk8AWcx
Slw0dvUoaQIDAQABo4ICYjCCAl4wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRY/XyP
lN6MoaIxjpDMb1wKZD6GXjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86js
oTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14
My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14
My5sZXRzZW5jcnlwdC5vcmcvMBgGA1UdEQQRMA+CDW1hbnRvdmFuZS5jb20wTAYD
VR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEEBgorBgEEAdZ5AgQCBIH1BIHy
APAAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWmomkOsAAAE
AwBHMEUCIFR6mcFoEdHbzEJguK15g8SWRs0ZgpF60pTR/H8ytzkKAiEA4VNTforT
/nWi3oY8igT5r3ynODvjaebEtjY72YdfyNIAdgBj8tvN6DvMLM8LcoQnV2szpI1h
d4+9daY4scdoVEvYjQAAAWmomkOyAAAEAwBHMEUCIBcN+fYuE6JeZbT8bT+qM1ld
zsCluPXkqZJN1U5Gq+lfAiEAgyQnPANCRO2aUWRr1UliWzRuJod66OkdbZGyyet8
pqgwDQYJKoZIhvcNAQELBQADggEBAJvVG6V+olS66qq94mTvOAWdVerZvC4MZhba
wcV+5YVxFOp8b14J6KMM3dVVahskP+QfasCfhovMOIKm5M5BxoXYvTtTa/C5dIit
SVCsoM19QEsv/MzwI5UY0onPxC8idwmG2J+JmglK7zGoTVSsnLu15bhwzvgGXlR6
DxvjA8NjiCqS1L95KSDKJ0i8i6JWX+C4kQCjpekdj5SfLcBtCArEW8ZlBUG1UD1e
ZygzXmLBjTM83k8Vty2gCk63M3uOtRRkh/toBjGYuo/O7sIqjmXBnqDl3GLSArwY
xMIU2lDO3Ip4EsL60HtOM1Hw3vDdwQ1MiBs82jAVBYGRLSkrrOc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 267537470248360358436522366397458361929199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 02:31:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-21 02:31:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mantovane.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 817567465919829063059769784413115074271552439336583960224670733092080602604504726678865585107738338714208085651015001577078409983938053073290548280833535787124930183352343757710116368847786648424495188963671695980998292798936897495200814850265713528183376433779148414065876797666208604222479740217904462483982084742161824514697700449860526811406555851765722098857334248498198142723182085638952396598521995436494794828881840838939021310130090668223688441232594518636970778377128926983033835330050205906835723957048742113990494723457368662294715440253323521958661051971983088049074083671491054676022818590087502368485534878852773846049640883526441383532434563380983703340828035051592414899978572308574021852303084104157000516603549863217992737255178793861809190585152387197318687339414432270028339013176284895315295218074784616734237831613900475307279165556631848795945355236692040244521657595116690811740403385914855174481402732812479549609516787543908030932465056690080696948584795205861498080739725196238800740496194100451958153280524201661325331194665930232110740545728232050088758194324564092667130774783542437224480170089554745921504035457091355628600542638121841525074774478907868765296628967816864193248983876356004972772796521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58fd7c8f94de8ca1a2318e90cc6f5c0a643e865e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mantovane.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169a89a43ac00000403004730450220547a99c16811d1dbcc4260b8ad7983c49646cd1982917ad294d1fc7f32b7390a022100e153537e8ad3fe75a2de863c8a04f9af7ca7383be369e6c4b6363bd9875fc8d200760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169a89a43b200000403004730450220170df9f62e13a25e65b4fc6d3faa33595dcec0a5b8f5e4a9924dd54e46abe95f0221008324273c034244ed9a51646bd549625b346e26877ae8e91d6d91b2c9eb7ca6a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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