sassomarconi.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5d:68:6b:67:ce:6a:7b:71:cc:73:14:34:55:1e:36:4b:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sassomarconi.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5d:68:6b:67:ce:6a:7b:71:cc:73:14:34:55:1e:36:4b:2b
Serial Number (int): 293121915311695656819680008749299801672491
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 79:31:47:fd:69:5d:a5:b2:65:89:f5:49:d9:80:ce:34:1f:35:0b:67
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 83:ca:c5:8d:a5:de:d0:08:6c:6c:69:d5:4f:cb:05:72:0e:b9:c0:55
Fingerprint (sha256): 1f:15:19:63:4c:95:93:ec:d7:73:55:1b:ea:58:ee:9f:d2:22:bd:55:45:2f:93:e9:32:06:98:27:51:58:fe:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sassomarconi.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sassomarconi.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sassomarconi.org

Other certificates including the domain name sassomarconi.org

(limited to 100 certificates)

Certificate

The complete raw certificate details for sassomarconi.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISA11oa2fOantxzHMUNFUeNksrMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MjgyMzQzNDVaFw0x
OTEwMjYyMzQzNDVaMBsxGTAXBgNVBAMTEHNhc3NvbWFyY29uaS5vcmcwggIiMA0G
CSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDfCldEGQ6a0MNmNVXbbxRDyqOKd1j1
EbdaIQj9CkvJ5q7Htzgs8i1nQLSa39txINjRHwaf69kJmolxIvGLfS75Zfjybqhw
Bt9IXKp9eO/7WfRs7EtpjTvEypT8dMlA7hqOHohxG56sGGMnUiml2ts08y776FMK
luD4Upmdb6KAR7g8rLV6yRrfUGRE5QUzceK1qRFPkSs/hBLKKTBBbIpyBXE/Xv0I
SNhk5aJEfaTNHk0OYoMCNjQeqLsrYRBPC0KHzRjkq+edT6NJMonkID9zdqYZ2Sdm
F7KYjXbE8Oaeu+Rf7y0QD+DoRFABlFFeDIFIfYV2L3JcDwlnyelFljgcEASm2JK2
TKGVRcwlDduD46Jh/4Hx4fIEPCC6y0h+uqyMDN+JDfMkwCfQGJxbWYrGIJoLmg9G
k2ixD0HNozUjv8V+/yx7xkZZn81RowgoxUlTktDsQGaA9b4/f5E/V0rWPG3hDFHy
YQj4mnJxXqBD804dQ+4AgoU4JVcyoMn3Zr6aPx0o/ci8k62uUU2pYZbDyfaaP0Iy
i82hwmr6BDL66VeMtPY1F9Un73HMkQPkuIaNC1XMfacSWpZZp8JoqIrHqf4LRYDx
sIA+rWtn145MVurPcEZr5QotxXXJ4ljb70t8myFY+kPUt9HB2l18qFiQOWUIRK+S
3h59eOXvSVrFYwIDAQABo4ICZjCCAmIwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR5
MUf9aV2lsmWJ9UnZgM40HzULZzAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv
86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmlu
dC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0Lmlu
dC14My5sZXRzZW5jcnlwdC5vcmcvMBsGA1UdEQQUMBKCEHNhc3NvbWFyY29uaS5v
cmcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEF
BQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEEAdZ5AgQC
BIH2BIHzAPEAdgDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8okwGd3fHb/gAAAWw7
LunCAAAEAwBHMEUCIGuvmKxWhAHKjOvlojrqn07b0ZbRygzSqpHDh7VYH+0oAiEA
rjryZJGJZw1lqhXuyMj5AO1IRmZc26m2cgaujYoDB7AAdwApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWw7LumzAAAEAwBIMEYCIQCcnNYu8nqxJ/He
zednN1iXLE8vAwCjpUNyTd4XaJ3RIAIhANchGddzRGzZ0mt2FtLXfmTJZ/xO15+f
eFBOPsSF4HK0MA0GCSqGSIb3DQEBCwUAA4IBAQCYrBPKv1H0MVJd1QLWdahxyo/e
Zpr97RgCMVSyr4YavfSu4NUmks6doeM8ABmSOt9y2QnYNZScyRg5EGuBniR7zabZ
FGEZD4cTJaTOP7kXaCXlPwjTMaCDidt2HLrdAJ7Idpq4Ga3+UJPKCkfpD9Jg+BLp
Dy1FLOAdq1ozgUwU06I9ioFIGPBHp/N8yNivwbZvq+GjqrAlYQZpyjamjHudv9mf
J9JNv5NLrfSqoHfJtwcdBV84/66pV4tL+Ph8jky7pgwsp7fmq75wKV2VEcSnOqEa
isfEzTfBWvcorJBSXaRvNdnUkY42JY1FnZ7WN5UhMGeRxGjVlb86iYsygD+m
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293121915311695656819680008749299801672491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:43:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:43:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sassomarconi.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 909925420611226916921416428413533475298763345324621188953953118105536959365319381406921139962344961026526841773413032361386124646117470004362967396003425796518229478407824736311281044380646871282984850330100859722037224114857671635300480753249010313835918823103782543355703321721866049943547412053384173264087310859590824406900552295267609673746163749919300588092538458111103109076114760785142685169118660055376463672503644342458469382102384477179017725428735313179020987890376725319665666447106972941503571405691400047619494346490409972096471376545238753412389315498063216330871256672757859779825206323044943260089717284005624598742305745459239121834473585558109892986136262689178605822767791946464949943875168215275392949647621409456708313086596826273275635246053586730542436845938357171380736452099591939068704069749625266300099394279001641872519214581495582363094556355281804023339834114999455033165802784228603943393939848413452544894054849458349089625807663366886125382246290744876447310890868567748175740409718898709575349151925178053689832761252063353203690930521504417057002728642534718240459367040319303373708205390062360449976063058870883158514475228625334842948317789771429685686139390727083072714332176097178902633039203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							793147fd695da5b26589f549d980ce341f350b67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sassomarconi.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b2ee9c2000004030047304502206baf98ac568401ca8cebe5a23aea9f4edbd196d1ca0cd2aa91c387b5581fed28022100ae3af2649189670d65aa15eec8c8f900ed4846665cdba9b67206ae8d8a0307b0007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b2ee9b300000403004830460221009c9cd62ef27ab127f1decde7673758972c4f2f0300a3a543724dde17689dd120022100d72119d773446cd9d26b7616d2d77e64c967fc4ed79f9f78504e3ec485e072b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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