www.cegliemessapica.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:4e:b7:44:de:8e:7e:c5:b4:08:84:bb:15:96:4b:8a:ce was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cegliemessapica.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:4e:b7:44:de:8e:7e:c5:b4:08:84:bb:15:96:4b:8a:ce
Serial Number (int): 286622384318263126803859336586032170371790
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 05:2c:09:29:4b:69:87:5e:27:df:08:30:c5:1e:8c:6b:c8:4c:5e:11
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 72:c1:cf:b4:9e:c6:3e:7e:01:83:b5:9d:1f:df:59:83:ca:e8:13:b0
Fingerprint (sha256): 1d:ed:7e:6c:4d:79:5e:e7:36:3a:2d:26:f7:05:63:6f:10:98:cd:12:f4:41:42:7d:29:1e:56:3c:6b:bc:e3:ce

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cegliemessapica.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cegliemessapica.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cegliemessapica.org

Other certificates including the domain name cegliemessapica.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.cegliemessapica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286622384318263126803859336586032170371790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-29 05:24:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-28 05:24:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cegliemessapica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 799763264858649773130930332414284488275130195043605222865391855458215679060108678433681075162641831075037150866696854303387349209305489136544646030545606368742271679688378289864304927614818003965413071284516981683106995008517331716355327885845760596492238976426051638191382416248143962459143168422483611718834347992217192696890360662982661883237244524550709563775944334682193749050217165747883146442797355996824365437118102564200513721540917355521275024827395444318722160643161514937221363994082134667849730246452030273914726123301049777765790149866783284760023390880220052655019692709662714834608621956335299173879079022516498885222105492464763694805299251703859389272057896040919791857967145115455994717289151956122473793668712235152112863784322505233406578977663895977148347103057779932886209213040368299393627033469384601499052723323558448993834653247318229673511033379819433301346428667248870828851869671713817963920430275402440023444988675138784902218167217882126574030681723460120249326165346755046596578162743553600393774262682293868256373721692691425398585033273041689188906298838321249001159557954710791252657985714078697905125341339260139515346932211429767455456245962635444546058468785195722996571117823498629934067047567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							052c09294b69875e27df0830c51e8c6bc84c5e11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cegliemessapica.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d7bb136250000040300473045022100b0b2cf1e83bf7c31d5297e3a530a270553703e100b37be9fc19ca8e3f05045aa022040c93381fb80cd7be980083530e9ae87153f110081c4240e0751140ba6c9fb23007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d7bb1363d0000040300473045022100ae8657293be254b49df46542c3d495c92291e9fc92c77a3da6f612f09dc355fb0220152342eb931d4288301f9e73de5ad91738c1d04ae27c9203e3a83c519a3ec871
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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