www.ristorantiitaliani.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:17:b3:b8:ba:58:3d:15:83:2f:6b:a8:a3:69:aa:1b:5e was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ristorantiitaliani.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:17:b3:b8:ba:58:3d:15:83:2f:6b:a8:a3:69:aa:1b:5e
Serial Number (int): 278722763920016446202215534289048989997918
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e2:a9:e4:99:c0:1a:b3:38:17:49:96:7a:8e:39:1c:d5:ff:29:f3:9b
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:9f:74:8a:82:d2:a5:b5:e0:fa:8d:d6:db:cf:ed:a4:b1:34:ad:91
Fingerprint (sha256): 20:07:aa:e7:31:fe:66:98:a2:b3:78:83:cd:e8:a0:0e:2b:ad:2a:88:00:ca:80:64:eb:5b:2a:76:5a:27:51:b3

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ristorantiitaliani.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ristorantiitaliani.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ristorantiitaliani.com

Other certificates including the domain name ristorantiitaliani.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.ristorantiitaliani.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278722763920016446202215534289048989997918
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-12 13:58:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 13:58:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ristorantiitaliani.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824005386106838295193511079323536460825756551655580295106898307958241827551311592176351175782721407639016917237280995902671697669663911310655889339766292158469819939463492774505597946763668668501017863715535328260860393171283685113444907827728640213044053563473661304048206320391561691825196429249217248825731101145077734352022272254210546930810285750120595386446676783838866668326857180450860667465929441722157508698468482700828482621889771328326308542660262325134464627130790304757901058454991713532136567570371900072398595837028835452123134380478911463964935309513637513570662538612311675190732678832798781790857186668565522171096407112913676457997414213595258708357679185737215862740852711959018511938163493321508802607456203825138141135315687600995231004179847029023285895338202878725925052721020474864674616617212075703323757236169912828558419262888223784916111405680210571997636289242360396865698843126276009205988064829250118519960101211752889438563365213460815844703415955214801657521120830296884389044304250656890386431305839567043664316988994857013447507842697690560490819247843999754158564114856022791393699295420718810626420527729138271190317554394941140397881297584362395192304351085882259399459564126364804868972983977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2a9e499c01ab3381749967a8e391cd5ff29f39b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ristorantiitaliani.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016b4c322cbb0000040300483046022100ad90c19d2c5101bc8cdbce3b9cd00a426b0bc664a6a04cdb74760536d84fdb11022100cd7306adc8feaf3598b51385bd55b99d0f8944912d44a463ce5e0d391306f91e00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b4c322cc900000403004630440220255f8378685b0bd58a9af641171e916e36113d7c242e79e91a540cbb77adcc8702205eb4c9b4e5cf2f9105e87c89e1a0f4657d74570dae43030a0962250a524776ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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